Phpcollab

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Phpcollab records in CISA KEV

No Phpcollab vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpcollab 5 records HIGH

Records

5 records

TI-2017-03991 CVE-2017-6090 · GHSA-937h-6g5c-rjx5

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and…

HIGH 82

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.96385 Published 2017-10-02 No fix listed CWE-434

TI-2008-04105 CVE-2008-4304 · GHSA-qg8m-qgmv-g29c

general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute…

MEDIUM 48

general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03007 Published 2008-12-23 No fix listed CWE-78

TI-2017-03990 CVE-2017-6089 · GHSA-8jqc-xr9j-25f3

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to…

MEDIUM 47

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/dele…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02953 Published 2017-10-02 No fix listed CWE-89

TI-2017-11646 CVE-2017-15907 · GHSA-hqc7-93jp-r484

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to…

MEDIUM 45

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01336 Published 2017-10-26 No fix listed CWE-89

TI-2006-01448 CVE-2006-1495 · GHSA-3w99-q2jm-p4jj

SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3…

MEDIUM 42

SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to execute arbitrary SQL commands via the loginForm parameter in t…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.06309 Published 2006-03-30 No fix listed

Open these records in search →

Critical	3
High	2
Medium	0
Low	0
No CVSS	0