Collabtive Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2014-3246 - Vulnerability Database

Collabtive

Collabtive Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability - CVE-2014-3246

Medium

Reference: CVE-2014-3246

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-3246

Title: Collabtive Improper Neutralization of Special Elements used in an SQL Command (SQL Injection) Vulnerability

Overview:

SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.php.