← Back

Activecollab Chat Module

activecollab_chat_module

Vendor: A51dev • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2012-6554
1A51dev
1Activecollab Chat Module
Apr 29, 2026
May 23, 2013
N/A· v4
N/A· v3
6.5 MEDIUM· v2
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properl...Show more
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch.Show less