CVE-2008-4305

2008-12-2318:30:03

CWE-94

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

6.8

Confidence

Low

EPSS

0.005

Percentile

75.7%

JSON

Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI.

Affected configurations

Nvd

Node

php-collabphp-collabRange≤2.5rc3

php-collabphp-collabMatch2.2

php-collabphp-collabMatch2.3

php-collabphp-collabMatch2.4

VendorProductVersionCPE
php-collabphp-collab*cpe:2.3:a:php-collab:php-collab:*:rc3:*:*:*:*:*:*
php-collabphp-collab2.2cpe:2.3:a:php-collab:php-collab:2.2:*:*:*:*:*:*:*
php-collabphp-collab2.3cpe:2.3:a:php-collab:php-collab:2.3:*:*:*:*:*:*:*
php-collabphp-collab2.4cpe:2.3:a:php-collab:php-collab:2.4:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
php-collab	php-collab	*	cpe:2.3:a:php-collab:php-collab::rc3::::::*
php-collab	php-collab	2.2	cpe:2.3:a:php-collab:php-collab:2.2:::::::*
php-collab	php-collab	2.3	cpe:2.3:a:php-collab:php-collab:2.3:::::::*
php-collab	php-collab	2.4	cpe:2.3:a:php-collab:php-collab:2.4:::::::*