CVE-2013-6872

Collabtive 1.1 - 'managetimetracker.php' SQL Injection

Severity Score

6.5

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

SQL injection vulnerability in managetimetracker.php in Collabtive before 1.2 allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a projectpdf action.

Vulnerabilidad de inyección de SQL en managetimetracker.php de Collabtive anterior a la versión 1.2 permite a usuarios autenticados ejecutar comandos SQL arbitrarios a través del parámetro id en una acción projectpdf.

Collabtive version 1.1 suffers from a remote SQL injection vulnerability.

*Credits: N/A

CVSS Scores

NISTv2 6.5

Attack Vector

Network

Attack Complexity

Low

Authentication

Single

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-11-26 CVE Reserved
2014-01-14 CVE Published
2014-01-15 First Exploit
2023-07-18 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

CAPEC

References (7)

URL	Tag	Source
http://osvdb.org/102123	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/30946	2014-01-15
http://packetstormsecurity.com/files/124777/Collabtive-1.1-SQL-Injection.html	2024-08-06
http://seclists.org/fulldisclosure/2014/Jan/72	2024-08-06
http://www.exploit-db.com/exploits/30946	2024-08-06
http://www.securityfocus.com/bid/64943	2024-08-06

URL	Date	SRC
http://www.collabtive.o-dyn.de/blog/?p=621#more-621	2015-07-28

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				<= 1.1 Search vendor "O-dyn" for product "Collabtive" and version " <= 1.1"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.1 Search vendor "O-dyn" for product "Collabtive" and version "0.1"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.2 Search vendor "O-dyn" for product "Collabtive" and version "0.2"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.2.5 Search vendor "O-dyn" for product "Collabtive" and version "0.2.5"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.3 Search vendor "O-dyn" for product "Collabtive" and version "0.3"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.3.5 Search vendor "O-dyn" for product "Collabtive" and version "0.3.5"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.3.6 Search vendor "O-dyn" for product "Collabtive" and version "0.3.6"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.4 Search vendor "O-dyn" for product "Collabtive" and version "0.4"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.4.5 Search vendor "O-dyn" for product "Collabtive" and version "0.4.5"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.4.6 Search vendor "O-dyn" for product "Collabtive" and version "0.4.6"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.4.7 Search vendor "O-dyn" for product "Collabtive" and version "0.4.7"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.4.8 Search vendor "O-dyn" for product "Collabtive" and version "0.4.8"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.4.9 Search vendor "O-dyn" for product "Collabtive" and version "0.4.9"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.4.9.1 Search vendor "O-dyn" for product "Collabtive" and version "0.4.9.1"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.5.1 Search vendor "O-dyn" for product "Collabtive" and version "0.5.1"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.5.5 Search vendor "O-dyn" for product "Collabtive" and version "0.5.5"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.6 Search vendor "O-dyn" for product "Collabtive" and version "0.6"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.6.1 Search vendor "O-dyn" for product "Collabtive" and version "0.6.1"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.6.2 Search vendor "O-dyn" for product "Collabtive" and version "0.6.2"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.6.3 Search vendor "O-dyn" for product "Collabtive" and version "0.6.3"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.6.4 Search vendor "O-dyn" for product "Collabtive" and version "0.6.4"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.6.5 Search vendor "O-dyn" for product "Collabtive" and version "0.6.5"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.7 Search vendor "O-dyn" for product "Collabtive" and version "0.7"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.7.5 Search vendor "O-dyn" for product "Collabtive" and version "0.7.5"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				0.7.6 Search vendor "O-dyn" for product "Collabtive" and version "0.7.6"		-		Affected
O-dyn Search vendor "O-dyn"		Collabtive Search vendor "O-dyn" for product "Collabtive"				1.0 Search vendor "O-dyn" for product "Collabtive" and version "1.0"		-		Affected