Description

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action.

Remediation

References

CVE-2013-6872

Related Vulnerabilities

WordPress Plugin Booking Calendar-Appointment Booking-BookIt Unspecified Vulnerability (2.3.8)

WordPress Plugin Gravity Forms Information Disclosure (2.4.8)

WordPress Plugin Header Footer Code Manager Cross-Site Scripting (1.1.16)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-3727)

MySQL CVE-2019-2757 Vulnerability (CVE-2019-2757)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2013-6872