Lucene search
K

6 matches found

OSV
OSV
added 2017/10/03 1:29 a.m.9 views

CVE-2017-6089

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

9.8CVSS8.7AI score0.02953EPSS
Exploits5References2
CVE
CVE
added 2017/10/02 5:0 p.m.55 views

CVE-2017-6089

PhpCollab 2.5.1 and earlier versions are affected by a SQL injection vulnerability. The issue allows remote attackers to execute arbitrary SQL commands through parameters in topics/deletetopics.php (project or id), bookmarks/deletebookmarks.php (id), and calendar/deletecalendar.php, leading to po...

9.8CVSS9.9AI score0.02953EPSS
Exploits5References2Affected Software1
exploitpack
exploitpack
added 2017/10/02 12:0 a.m.30 views

phpCollab 2.5.1 - SQL Injection

phpCollab 2.5.1 - SQL Injection CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not correctly filter arguments,...

7.5CVSS0.3AI score0.02953EPSS
Exploits5
Exploit DB
Exploit DB
added 2017/10/02 12:0 a.m.41 views

phpCollab 2.5.1 - SQL Injection

CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not correctly filter arguments, allowing arbitrary SQL code...

9.8CVSS7AI score0.02953EPSS
Exploits5
0day.today
0day.today
added 2017/09/30 12:0 a.m.31 views

PhpCollab 2.5.1 SQL Injection Vulnerability

Exploit for php platform in category web applications CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not...

7.5CVSS9.2AI score0.02953EPSS
Exploits5
Packet Storm
Packet Storm
added 2017/09/29 12:0 a.m.35 views

PhpCollab 2.5.1 SQL Injection

CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not correctly filter arguments, allowing arbitrary SQL code...

0.3AI score0.02953EPSS
Exploits5
Rows per page
Query Builder