Phpcollab - vulnerabilities (CVEs)

5 CVEs in 1 products, 0 in the last 30 days, newest from 2017-10-26.

Products

CVE-2017-15907 - CVSS 9.8 (critical), 2017-10-26: SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to…
CVE-2017-6089 - CVSS 9.8 (critical), 2017-10-03: SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to…
CVE-2017-6090 - CVSS 8.8 (high), 2017-10-03: Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by…
CVE-2008-4304 - CVSS 10 (critical), 2008-12-23: general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspecified input related…
CVE-2006-1495 - CVSS 7.5 (high), 2006-03-30: SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote attackers to…