PT-2002-1502 · Phprojekt · Phprojekt

Publicado 2002-08-12 · Atualizado 2008-09-05 · CVE-2002-0451

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHProjekt versions 3.1 through 3.1a

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by specifying the URL to the code in the lib path parameter of the filemanager forms.php file.

Recommendations For PHProjekt versions 3.1 through 3.1a, consider restricting access to the filemanager forms.php file until a patch is available. Avoid using the lib path parameter in the affected file to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2002-0451

Produtos afetados

Phprojekt

Referências · 6

• 🔥 http://securityfocus.com/bid/4284 · Exploit
• 🔥 https://exploit-db.com/exploits/21343 · Exploit
• http://iss.net/security_center/static/8448.php · Aviso do Fabricante
• http://securityfocus.com/archive/1/261676 · Aviso do Fabricante
• http://phprojekt.com/modules.php?op=modload&name=News&file=article&sid=19&mode=&order= · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-0451 · Nota de Segurança