Description
SQL injection vulnerability in managechat.php in Collabtive 0.65 allows remote attackers to execute arbitrary SQL commands via the chatstart[USERTOID] cookie in a pull action.
Remediation
References
Related Vulnerabilities
WordPress Plugin Insert or Embed Articulate Content into WordPress Directory Traversal (4.2999)
Oracle Application Server CVE-2008-4014 Vulnerability (CVE-2008-4014)
WordPress Plugin Secure File Manager Remote Code Execution (2.8.1)
Joomla! Core Security Bypass (1.7.0 - 3.9.22)
Moodle Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-26045)