6 matches found
Sql injection
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...
CVE-2017-15907
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...
CVE-2017-15907
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...
CVE-2017-15907
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...
PT-2017-14276
Name of the Vulnerable Software and Affected Versions phpCollab versions 2.5.1 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "newsdesk/newsdesk.php" endpoint. Recommendations For phpCollab...
CVE-2017-15907: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...