Labcollector

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2019-25438 Feb 20, 23:16 HIGH POC This Week

LabCollector 5.423 contains multiple SQL injection vulnerabilities that allow unauthenticated attackers to execute arbitrary SQL commands by injecting malicious code through POST parameters. [CVSS 7.5 HIGH]

PHP SQLi Labcollector Agilebio

NVD Exploit-DB

CVSS 3.1

7.5

EPSS

0.3%

CVE-2023-33253 Jun 12, 13:15 HIGH POC This Week

LabCollector 6.0 though 6.15 allows remote code execution. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

PHP RCE File Upload Labcollector Agilebio

NVD GitHub

CVSS 3.1

8.8

EPSS

2.5%

CVE-2019-25438

EPSS 0% CVSS 7.5

HIGH POC This Week

PHP SQLi Labcollector +1

NVD Exploit-DB

CVE-2023-33253

EPSS 3% CVSS 8.8

HIGH POC This Week

PHP RCE File Upload +2

NVD GitHub