120 matches found
CVE-2017-6090
Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logosclients/...
PT-2017-16888
Name of the Vulnerable Software and Affected Versions PhpCollab versions 2.5.1 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via the project or id parameters to "topics/deletetopics.php", the id parameter to...
PT-2017-16889
Name of the Vulnerable Software and Affected Versions PhpCollab versions 2.5.1 and earlier Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the clients/editclient.php script, and then accessing it via a direct...
phpCollab 2.5.1 - SQL Injection
CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not correctly filter arguments, allowing arbitrary SQL code...
phpCollab 2.5.1 - Arbitrary File Upload
CVE-2017-6090 PhpCollab 2.5.1 Arbitrary File Upload unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. Arbitrary File Upload The phpCollab code does not correctly filter uploaded file contents. An...
phpCollab 2.5.1 - SQL Injection
phpCollab 2.5.1 - SQL Injection CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not correctly filter arguments,...
phpCollab 2.5.1 - Arbitrary File Upload
phpCollab 2.5.1 - Arbitrary File Upload CVE-2017-6090 PhpCollab 2.5.1 Arbitrary File Upload unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. Arbitrary File Upload The phpCollab code does not correctly filt...
PhpCollab 2.5.1 Shell Upload Exploit
Exploit for php platform in category web applications CVE-2017-6090 PhpCollab 2.5.1 Arbitrary File Upload unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. Arbitrary File Upload The phpCollab code does not...
PhpCollab 2.5.1 SQL Injection Vulnerability
Exploit for php platform in category web applications CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not...
PhpCollab 2.5.1 Shell Upload
CVE-2017-6090 PhpCollab 2.5.1 Arbitrary File Upload unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. Arbitrary File Upload The phpCollab code does not correctly filter uploaded file contents. An...
PhpCollab 2.5.1 SQL Injection
CVE-2017-6089 PhpCollab 2.5.1 Multiple SQL Injections unauthenticated Description PhpCollab is an open source web-based project management system, that enables collaboration across the Internet. SQL injections The phpCollab code does not correctly filter arguments, allowing arbitrary SQL code...
phpCollab 2.5.1 Unauthenticated File Upload
This module exploits a file upload vulnerability in phpCollab 2.5.1 which could be abused to allow unauthenticated users to execute arbitrary code under the context of the web server user. The exploit has been tested on Ubuntu 16.04.3 64-bit Module Options msf use...
phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability
Product & Service Introduction: =============================== phpCollab is an open source internet-enabled system for use in projects that require collaboration over the internet. Those organizations, such as consulting firms, that rely on a division between firm-side and client-side informatio...
phpcollab any user to create privilege upgrade-csrf
No description provided by source. document.forms0.submit...
phpCollab CMS 2.5 Cross Site Request Forgery
Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-17 Vulnerability Laboratory ID VL-ID: ====================================...
phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability
Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-17 Vulnerability Laboratory ID VL-ID: ====================================...
phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability
Document Title: =============== phpCollab v2.5 CMS - Privilege Escalate CSRF Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1911 Release Date: ============= 2016-08-16 Vulnerability Laboratory ID VL-ID: ====================================...
phpcollab-emailuser-SQL injection vulnerability
No description provided by source...
phpCollab CMS SQl Injection Vulnerability
Phpcms is a web content management system based on PHP+Mysql architecture and an open source PHP development platform. A web remote SQL injection vulnerability exists in phpCollab v2.5, which can be exploited by remote attackers to execute malicious SQL commands...
PHPCollab CMS 2.5 - emailusers.php SQL Injection
PHPCollab CMS 2.5 - emailusers.php SQL Injection Document Title: =============== phpCollab v2.5 CMS - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1898 Release Date: ============= 2016-08-08 Vulnerability Laboratory ID VL-I...