Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Static code injection vulnerability in installation/setup.php in phpCollab 2.5 rc3 and earlier allows remote authenticated administrators to inject arbitrary PHP code into include/settings.php via the URI.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
phpCollab 静态代码注入漏洞
Vulnerability Description
phpCollab 是一款项目管理软件,为工作团队提供一种开源的,网络化的工作平台。 phpCollab 2.5 rc3 及其早期版本的installation/setup.php中存在静态代码注入漏洞。远程验证管理员可以借助URI,向include/settings.php注入任意PHP代码。
CVSS Information
N/A
Vulnerability Type
N/A