phpcollab kayıtları
phpcollab üreticisine ait 5 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 1 · %20
- Pre-auth RCE
- 4
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2
- CWE-434 Unrestricted Upload of File with Dangerous Type1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
5 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
64Bu hafta | CVE-2017-6090Silahlaştırılmış | Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to executephpcollab · phpcollab · CWE-434 | Yüksek8,8 | — | %96,4 | 2 Eki 2017 |
41Planlayın | CVE-2008-4304İstismar yok | general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspeciphpcollab · phpcollab · CWE-78 | Kritik10,0 | — | %3,0 | 23 Ara 2008 |
40Planlayın | CVE-2017-6089Kavram kanıtı | SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or phpcollab · phpcollab · CWE-89 | Kritik9,8 | — | %3,0 | 2 Eki 2017 |
39İzleyin | CVE-2017-15907İstismar yok | SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter tophpcollab · phpcollab · CWE-89 | Kritik9,8 | — | %1,3 | 26 Eki 2017 |
32İzleyin | CVE-2006-1495Kavram kanıtı | SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows remnetoffice · netoffice | Yüksek7,5 | — | %6,3 | 29 Mar 2006 |
- CVE-2017-609064Bu hafta
Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute
YüksekCVSS 8,8SilahlaştırılmışEPSS %96phpcollab · phpcollab2 Eki 2017
- CVE-2008-430441Planlayın
general/login.php in phpCollab 2.5 rc3 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in unspeci
KritikCVSS 10,0İstismar yokEPSS %3phpcollab · phpcollab23 Ara 2008
- CVE-2017-608940Planlayın
SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or
KritikCVSS 9,8Kavram kanıtıEPSS %3phpcollab · phpcollab2 Eki 2017
- CVE-2017-1590739İzleyin
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to
KritikCVSS 9,8İstismar yokEPSS %1phpcollab · phpcollab26 Eki 2017
- CVE-2006-149532İzleyin
SQL injection vulnerability in general/sendpassword.php in (1) PHPCollab 2.4 and 2.5.rc3, and (2) NetOffice 2.5.3-pl1 and 2.6.0b2 allows rem
YüksekCVSS 7,5Kavram kanıtıEPSS %6netoffice · netoffice29 Mar 2006