{"uuid": "3257a7e1-72cf-4689-90b7-7a620daadec8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2017-6090", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/phpcollab_upload_exec.rb", "content": "{\"aliases\": [], \"arch\": \"php\", \"author\": [\"Nicolas SERRA \", \"Nick Marcoccio \\\"1oopho1e\\\" \"], \"autofilter_ports\": [80, 8080, 443, 8000, 8888, 8880, 8008, 3000, 8443], \"autofilter_services\": [\"http\", \"https\"], \"check\": true, \"default_credential\": false, \"description\": \"This module exploits a file upload vulnerability in phpCollab 2.5.1\\n          which could be abused to allow unauthenticated users to execute arbitrary code\\n          under the context of the web server user.\\n\\n          The exploit has been tested on Ubuntu 16.04.3 64-bit\", \"disclosure_date\": \"2017-09-29\", \"fullname\": \"exploit/unix/webapp/phpcollab_upload_exec\", \"is_install_path\": true, \"mod_time\": \"2026-04-22 11:59:12 +0000\", \"name\": \"phpCollab 2.5.1 Unauthenticated File Upload\", \"needs_cleanup\": true, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/unix/webapp/phpcollab_upload_exec.rb\", \"platform\": \"PHP\", \"post_auth\": false, \"rank\": 600, \"ref_name\": \"unix/webapp/phpcollab_upload_exec\", \"references\": [\"CVE-2017-6090\", \"EDB-42934\", \"URL-http://www.phpcollab.com/\", \"URL-https://sysdream.com/news/lab/2017-09-29-cve-2017-6090-phpcollab-2-5-1-arbitrary-file-upload-unauthenticated/\"], \"rport\": 80, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:50:46.401538Z"}