CVE-2017-6090

PoC ×3—

CVSS 3.0

8.8 high

EPSS

96%p100

Published

Oct 3, 2017 (Oct 3, 2017)

Modified

Jun 17, 2026

Description

Unrestricted file upload vulnerability in clients/editclient.php in PhpCollab 2.5.1 and earlier allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in logos_clients/.

Vendors: phpcollab
Products: phpcollab
Weakness: CWE-434
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (96.2%)

In the news0 stories

No ingested article mentions this CVE yet.