CVE-2014-3246: O-Dyn Collabtive

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

SQL injection vulnerability in Collabtive 1.2 allows remote authenticated users to execute arbitrary SQL commands via the folder parameter in a fileview_list action to manageajax.php.

Affected products

• O-Dyn Collabtive: version 1.2 only

Published 2014-05-13. Last modified 2026-06-17.