Description

SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action.

Remediation

References

CVE-2010-4269

Related Vulnerabilities

Oracle JRE CVE-2023-21967 Vulnerability (CVE-2023-21967)

Drupal Core 9.0.x Cross-Site Request Forgery (9.0.0 - 9.0.14)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-55289)

SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2019-1443)

CKEditor Inclusion of Functionality from Untrusted Control Sphere Vulnerability (CVE-2021-26271)

Severity

High

Classification

CVE-2010-4269 CWE-138

Tags

Missing Update Known Vulnerabilities