Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

5 records

Vendor: Phpcollab Component: Phpcollab Clear all filters
TI-2017-03991 CVE-2017-6090 · GHSA-937h-6g5c-rjx5

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and…

Priority HIGH 82

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing…

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.96385 Published 2017-10-02 No fix listed CWE-434
TI-2017-03990 CVE-2017-6089 · GHSA-8jqc-xr9j-25f3

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to…

Priority MEDIUM 47

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/dele…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02953 Published 2017-10-02 No fix listed CWE-89