Php-collab

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Php-collab records in CISA KEV

No Php-collab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Php-collab 2 records MEDIUM Phpcollab 1 record LOW

Records

3 records

TI-2008-04106 CVE-2008-4305 · GHSA-f73g-4ffh-f84r

Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and…

MEDIUM 44

Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03065 Published 2008-12-23 No fix listed CWE-94

TI-2008-04104 CVE-2008-4303 · GHSA-92p7-hgp5-68xh

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow…

LOW 32

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01182 Published 2008-12-23 No fix listed CWE-89

TI-2011-03329 CVE-2011-3772 · GHSA-6vcg-ggj4-hj3p

phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct…

LOW 25

phpCollab 2.5 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by topics/noti_newtopic.php and certain…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01229 Published 2011-09-24 No fix listed CWE-200

Open these records in search →

Critical	1
High	0
Medium	2
Low	0
No CVSS	0