TI-2012-05272 CVE-2012-6554 · GHSA-6wq4-xv9r-8vq7
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote…
Priority MEDIUM 46
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properl…