CVE-2017-6089 in phpCollab信息

摘要

由 VulDB • 2026-06-23

PhpCollab 2.5.1及更早版本中存在SQL注入漏洞，远程攻击者可通过向topics/deletetopics.php传递（1）project或id参数、向bookmarks/deletebookmarks.php传递（2）id参数，以及向calendar/deletecalendar.php传递（3）id参数来执行任意SQL命令。

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

预定

2017-02-18

披露

2017-10-02

管理

已接受

条目

VDB-107379

CPE

准备好

CWE

CWE-89 (已确认)

利用

下载

CVSS

9.8 (NVD)

EPSS

0.02953

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2017-6089
NVD	https://nvd.nist.gov/vuln/detail/CVE-2017-6089
CVE Details	https://www.cvedetails.com/cve/CVE-2017-6089/

◂ 上一步一览下一步 ▸

Want to know what is going to be exploited?

We predict KEV entries!