Lucene search
K

8 matches found

Nuclei
Nuclei
added 6 days ago18 views

PhpColl 2.5.1 Arbitrary File Upload

PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/ via clients/editclient.php. id: CVE-2017-6090 info: name: PhpColl 2.5.1 Arbitrary File Uplo...

8.8CVSS7.7AI score0.86913EPSS
Exploits9References5
VulnCheck KEV
VulnCheck KEV
added 2024/01/04 12:0 a.m.2 views

VulnCheck KEV: CVE-2017-6090

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...

8.8CVSS7.6AI score0.86913EPSS
Exploits9References1
0day.today
0day.today
added 2018/01/11 12:0 a.m.61 views

phpCollab 2.5.1 - Unauthenticated File Upload Exploit

Exploit for php platform in category remote exploits This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'phpCollab 2.5.1 Unauthenticated File Upload', 'Description' = %q This module exploits a file...

6.5CVSS8.6AI score0.86913EPSS
Exploits9
Packet Storm
Packet Storm
added 2018/01/11 12:0 a.m.54 views

phpCollab 2.5.1 Unauthenticated File Upload

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'phpCollab 2.5.1 Unauthenticated File Upload', 'Description' = %q This module exploits a file upload vulnerability in phpCollab 2.5.1 which could ...

6.5CVSS8.7AI score0.86913EPSS
Exploits9
CVE
CVE
added 2017/10/02 5:0 p.m.81 views

CVE-2017-6090

CVE-2017-6090 affects PhpCollab 2.5.1 and earlier. Unrestricted file upload in clients/editclient.php allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and accessing it under logos_clients/. The vulnerability has public PoCs and exploit c...

8.8CVSS8.6AI score0.86913EPSS
In wildExploits9References3Affected Software1
Exploit DB
Exploit DB
added 2017/10/02 12:0 a.m.79 views

phpCollab 2.5.1 - Arbitrary File Upload

CVE-2017-6090 PhpCollab 2.5.1 Arbitrary File Upload unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. Arbitrary File Upload The phpCollab code does not correctly filter uploaded file contents. An...

8.8CVSS8.7AI score0.86913EPSS
Exploits9
exploitpack
exploitpack
added 2017/10/02 12:0 a.m.27 views

phpCollab 2.5.1 - Arbitrary File Upload

phpCollab 2.5.1 - Arbitrary File Upload CVE-2017-6090 PhpCollab 2.5.1 Arbitrary File Upload unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. Arbitrary File Upload The phpCollab code does not correctly filt...

6.5CVSS0.86913EPSS
Exploits9
Packet Storm
Packet Storm
added 2017/09/29 12:0 a.m.65 views

PhpCollab 2.5.1 Shell Upload

CVE-2017-6090 PhpCollab 2.5.1 Arbitrary File Upload unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. Arbitrary File Upload The phpCollab code does not correctly filter uploaded file contents. An...

8.8AI score0.86913EPSS
Exploits9
Rows per page
Query Builder