cbcvebase.

A51Dev Activecollab Chat Module vulnerabilities

1 known vulnerability affecting a51dev/activecollab_chat_module.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
MEDIUM1

Vulnerabilities

Page 1 of 1
CVE-2012-6554P3MEDIUMCVSS 6.5PoCv1.0v1.1+8 more2013-05-23
CVE-2012-6554 [MEDIUM] CWE-20 CVE-2012-6554: functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authentica functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch.
nvd
A51Dev Activecollab Chat Module vulnerabilities | cvebase