CVE-2017-6089

Published: 2017-10-03T01:29Z

Last Modified: 2024-11-21T03:29Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

SQL injection vulnerability in PhpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the (1) project or id parameters to topics/deletetopics.php; the (2) id parameter to bookmarks/deletebookmarks.php; or the (3) id parameter to calendar/deletecalendar.php. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt