Approved changes feed: RSS · Atom

cpe:2.3:a:a51dev:activecollab_chat_module:1.1.1:*:*:*:*:*:*:*

part: a version: 1.1.1 update: *

VendorA51Dev (a61fa7c7-feea-5e0c-8d76-08a64ec1bd51)
ProductActivecollab Chat Module (1b07d7be-420b-5576-a3b1-61ccfc98bca6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-6554 vulnerable 2026-06-03 14:32:34.669617 Details available
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch.
Published: 2013-05-23T15:00:00.000Z
Updated: 2024-08-06T21:36:01.321Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.