NVD

Id
47235  
Name
CVE-2012-6554  
Description
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2013-05-23  
Modified Date
2013-05-24  
Seq
2012-6554  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
236325 47235 CVE-2012-6554 http://www.activecollab.com/downloads/category/4/package/62/releases  View
236326 47235 CVE-2012-6554 18898  View
236327 47235 CVE-2012-6554 53624  View
236328 47235 CVE-2012-6554 activecollab-pregreplace-code-exec(75741)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30285 JVNDB-2012-005993 activeCollab 用の Chat モジュールにおける任意の PHP コードを実行される脆弱性 activeCollab 用の Chat モジュール内の functions/html_to_text.php には、任意の PHP コードを実行される脆弱性が存在します。 CVE-2012-6554 59792 CVE-2012-6554 47235 6.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005993.html 2012-05-16 2013-05-27 View