CVE-2017-6090

Name of the Vulnerable Software and Affected Versions PhpCollab versions 2.5.1 and earlier

Description The issue allows remote authenticated users to execute arbitrary code by uploading a file with an executable extension to the clients/editclient.php script, and then accessing it via a direct request to the file in logos clients/.

Recommendations For versions 2.5.1 and earlier, consider restricting access to the clients/editclient.php script until a fix is available, and avoid uploading files with executable extensions to prevent potential code execution.