Lucene search
+L

1 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/10/03 12:00 a.m.•4 views

CVE-2017-6089: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 project or id parameters to topics/deletetopics.php; the 2 id parameter to bookmarks/deletebookmarks.php; or the 3 id parameter to calendar/deletecalendar.php...

9.8CVSS8.6AI score0.02953EPSS
SaveExploits5References2
Rows per page
Query Builder