CVE-2008-4303

2008-12-2318:30:03

CWE-89

[email protected]

web.nvd.nist.gov

sql injection

phpcollab

remote attack

security vulnerability

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.4 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.7%

JSON

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors.

Affected configurations

NVD

Node

php-collabphp-collabRange≤2.5rc3

php-collabphp-collabMatch2.2

php-collabphp-collabMatch2.3

php-collabphp-collabMatch2.4

CPENameOperatorVersion
php-collab:php-collabphp-collable2.5
php-collab:php-collabphp-collabeq2.2
php-collab:php-collabphp-collabeq2.3
php-collab:php-collabphp-collabeq2.4