phpcollab phpcollab 2.5.rc3 vulnerabilities and exploits

(subscribe to this query)

NA

SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remote malicious users to execute arbitrary SQL commands via the loginForm parameter in the "forgotten password" option.

Phpcollab Phpcollab 2.5.rc3 Netoffice Netoffice 2.5.3 Pl1 Phpcollab Phpcollab 2.4

1 EDB exploit

NA

general/login.php in phpCollab 2.5 rc3 and previous versions allows remote malicious users to execute arbitrary commands via shell metacharacters in unspecified input related to the SSL_CLIENT_CERT environment variable. NOTE: in some environments, SSL_CLIENT_CERT always has a bas...

Phpcollab Phpcollab 2.5 Phpcollab Phpcollab Phpcollab Phpcollab 2.4 Phpcollab Phpcollab 2.3 Phpcollab Phpcollab 2.2

NA

Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and previous versions allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI.

Php-collab Php-collab Php-collab Php-collab 2.4 Php-collab Php-collab 2.2 Php-collab Php-collab 2.3

NA

Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and previous versions allow remote malicious users to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors.

Php-collab Php-collab 2.2 Php-collab Php-collab 2.3 Php-collab Php-collab Php-collab Php-collab 2.4

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook