Vulnerabilities

TI-2008-04106 CVE-2008-4305 · GHSA-f73g-4ffh-f84r

Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and…

MEDIUM 44

Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI.

CVSS 2.0HIGH 9.0 Network Low privileges Interaction — EPSS 0.03065 Published 2008-12-23 No fix listed CWE-94

TI-2008-04104 CVE-2008-4303 · GHSA-92p7-hgp5-68xh

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow…

LOW 32

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01182 Published 2008-12-23 No fix listed CWE-89

Vulnerabilities

Filters

Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and…

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow…