1 matches found
CVE-2017-6089: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...
9.8CVSS8.6AI score0.02953EPSS
SaveExploits5References2
20