CVE-2017-15907

Critical

Published: 26/10/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In phpCollab version 2.5.1 and earlier, there is an SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands via the id parameter in newsdesk/newsdesk.php.

Risk Assessment

This vulnerability may lead to unauthorized access to the database and exposure of sensitive information, posing a significant threat to the organization's security.

Recommendation

It is recommended to update phpCollab to the latest version to eliminate this vulnerability and conduct a security audit of the application.

Original NVD description (English source)

SQL injection vulnerability in phpCollab 2.5.1 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter to newsdesk/newsdesk.php.