CVE-2014-3246
NONE EPSS 67.6%
Published May 13, 201412y ago · Modified Jun 17, 20262w ago
Published May 13, 2014 12y ago
Last Modified Jun 17, 2026 2w ago
Description
SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.php.
Threat Intelligence
EPSS Exploit Probability
67.6% percentile
Exploit & Patch Status
Public Exploit Known
No Patch Available
Weaknesses 1
CWE-89 SQL Injection Injection
Affected Products 1
| Vendor | Product | Version | Range |
|---|---|---|---|
| o-dyn | collabtive | 1.2 | any |
References 2
- exploit-db.com http://www.exploit-db.com/exploits/33249
- securityfocus.com http://www.securityfocus.com/bid/67287
Remediation
No remediation data recorded yet
Check vendor advisories and the NVD entry for patch availability.