Sql injection

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...

CVE-2017-15907

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...

CVE-2017-15907

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...

CVE-2017-15907

CVE-2017-15907: SQL injection in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php. Affected: phpCollab (2.5.1 and earlier). Root cause: unsafely embedded user input in SQL query construction. Impact: potential data...

CVE-2017-15907: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php...

phpCollab SQL Injection Vulnerability

phpCollab is an open source Internet enablement system for projects that require collaboration over the Internet. A SQL injection vulnerability exists in phpCollab 2.5.1 and earlier versions. The vulnerability can be exploited by remote attackers to execute arbitrary SQL commands via the id...

PT-2017-14276

Name of the Vulnerable Software and Affected Versions phpCollab versions 2.5.1 and earlier Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the id parameter to the "newsdesk/newsdesk.php" endpoint. Recommendations For phpCollab...

CVE-2017-6090

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...

CVE-2017-6089

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

CVE-2017-6090

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...

CVE-2017-6089

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

Sql injection

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

Unrestricted file upload

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...

CVE-2017-6090: Unrestricted Upload of File with Dangerous Type

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...

CVE-2017-6089: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

CVE-2017-6089

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

CVE-2017-6090

CVE-2017-6090 affects PhpCollab 2.5.1 and earlier. Unrestricted file upload in clients/editclient.php allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension and accessing it under logos_clients/. The vulnerability has public PoCs and exploit c...

CVE-2017-6089

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

CVE-2017-6089

PhpCollab 2.5.1 and earlier versions are affected by a SQL injection vulnerability. The issue allows remote attackers to execute arbitrary SQL commands through parameters in topics/deletetopics.php (project or id), bookmarks/deletebookmarks.php (id), and calendar/deletecalendar.php, leading to po...

CVE-2017-6090

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...