Description
SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin Simple Sitemap-Create a Responsive HTML Sitemap Security Bypass (3.5.4)
WordPress Plugin Heat Trackr Cross-Site Scripting (1.0)
WordPress Plugin MasterStudy LMS-for Online Courses and Education Security Bypass (3.3.8)
Plone CMS Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-7317)
Atlassian Jira CVE-2020-36237 Vulnerability (CVE-2020-36237)