PT-2002-2481 · Phprojekt · Phprojekt

Publicado 2002-12-31 · Atualizado 2017-07-12 · CVE-2002-1759

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHProjekt versions 2.0 through 3.1

Description The issue concerns the upload function, which does not properly verify certain variables related to uploaded data. This allows remote attackers to cause PHProjekt to process arbitrary files.

Recommendations For PHProjekt versions 2.0 through 3.1, consider disabling the upload function until a patch is available to prevent remote attackers from processing arbitrary files.

Correção

Identificadores relacionados

CVE-2002-1759

Produtos afetados

Phprojekt

Referências · 4

• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-1759 · Nota de Segurança
• http://securityfocus.com/bid/4597 · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8944 · Nota