CVE

Id
66819  
CVE No.
CVE-2013-6872  
Status
Candidate  
Description
SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action.  
Phase
Assigned (20131126)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
647023 66819 CVE-2013-6872 EXPLOIT-DB:30946  View
647024 66819 CVE-2013-6872 URL:http://www.exploit-db.com/exploits/30946  View
647025 66819 CVE-2013-6872 FULLDISC:20140115 Collabtive Sql Injection  View
647026 66819 CVE-2013-6872 URL:http://seclists.org/fulldisclosure/2014/Jan/72  View
647027 66819 CVE-2013-6872 MISC:http://www.collabtive.o-dyn.de/blog/?p=621#more-621  View
647028 66819 CVE-2013-6872 MISC:http://packetstormsecurity.com/files/124777/Collabtive-1.1-SQL-Injection.html  View
647029 66819 CVE-2013-6872 BID:64943  View
647030 66819 CVE-2013-6872 URL:http://www.securityfocus.com/bid/64943  View
647031 66819 CVE-2013-6872 OSVDB:102123  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
24065 JVNDB-2013-005640 RealNetworks RealPlayer におけるヒープベースのバッファオーバーフローの脆弱性 RealNetworks RealPlayer には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2013-6877 66819 9.3 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005640.html  View