CVE-2017-6090

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by…

published October 2, 2017

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.9th percentile for exploit probability.

CVSS
—
EPSS
96%
Percentile
99.9
In the wild
Unconfirmed
What it is

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.96385 · 99.9th percentile
Published
2017-10-02T17:00Z
EPSS history
Timeline
  • 02 OCT 17:00Z
    Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by…
    cvelistv5