Unrated severityNVD Advisory· Published May 23, 2013· Updated Jun 16, 2026
CVE-2012-6554
CVE-2012-6554
Description
functions/html_to_text.php in the Chat module before 1.5.2 for activeCollab allows remote authenticated users to execute arbitrary PHP code via the message[message_text] parameter to chat/add_messag, which is not properly handled when executing the preg_replace function with the eval switch.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: <1.5.2
Patches
Vulnerability mechanics
References
6- www.exploit-db.com/exploits/18898nvdExploit
- secunia.com/advisories/49246nvdVendor Advisory
- www.activecollab.com/downloads/category/4/package/62/releasesnvdVendor Advisory
- osvdb.org/81966nvd
- www.securityfocus.com/bid/53624nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/75741nvd
News mentions
0No linked articles in our index yet.