Vulnerabilities (CVE)

Filtered by vendor Phpcollab Subscribe
Filtered by product Phpcollab
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2017-15907 1 Phpcollab 1 Phpcollab 2017-11-15 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php.
CVE-2017-6089 1 Phpcollab 1 Phpcollab 2017-10-11 7.5 HIGH 9.8 CRITICAL
SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/deletebookmarks.php; or the (3) id parameter to calendar/deletecalendar.php.