Approved changes feed: RSS · Atom

cpe:2.3:a:php-collab:php-collab:*:rc3:*:*:*:*:*:*

part: a version: * update: rc3

VendorPhp Collab (855c39eb-3935-5afa-a8ae-62560e551839)
ProductPhp Collab (6e25cc2a-0996-5445-ac5f-4751bdef2b4a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:docker/phpcollab/phpcollab purl2cpe 2026-06-01 10:14:23.437798
pkg:github/phpcollab/phpcollab purl2cpe 2026-06-01 10:14:23.437800

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-4305 vulnerable 2026-06-08 04:50:38.550384 Details available
Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI.
Published: 2008-12-23T18:13:00.000Z
Updated: 2024-08-07T10:08:34.969Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4303 vulnerable 2026-06-08 04:50:38.543096 Details available
Multiple SQL injection vulnerabilities in phpCollab 2.5 rc3, 2.4, and earlier allow remote attackers to execute arbitrary SQL commands via the loginForm parameter to general/login.php, and unspecified other vectors.
Published: 2008-12-23T18:13:00.000Z
Updated: 2024-08-07T10:08:35.154Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.