Cyon

**Name of the Vulnerable Software and Affected Versions** PHProjekt versions 4.2.3 and earlier **Description** The issue allows remote attackers to include arbitrary PHP code via a URL in the `path pre` parameter in the authform.inc.php file. **Recommendations** For PHProjekt versions 4.2.3 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.