Description
SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action.
Remediation
References
Related Vulnerabilities
WordPress Plugin WP Statistics Cross-Site Scripting (12.0.8.1)
WordPress Time-of-check Time-of-use (TOCTOU) Race Condition Vulnerability (CVE-2022-3590)
WordPress Plugin WP Booking System Multiple Vulnerabilities (1.5.1)
Oracle Database Server CVE-2014-4289 Vulnerability (CVE-2014-4289)
WordPress Plugin Check & Log Email Cross-Site Scripting (0.5.1)