PT-2002-1502 · Phprojekt · Phprojekt

Published 2002-08-12 · Updated 2008-09-05 · CVE-2002-0451

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHProjekt versions 3.1 through 3.1a

Description The issue allows remote attackers to execute arbitrary PHP code. This is achieved by specifying the URL to the code in the lib path parameter of the filemanager forms.php file.

Recommendations For PHProjekt versions 3.1 through 3.1a, consider restricting access to the filemanager forms.php file until a patch is available. Avoid using the lib path parameter in the affected file to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2002-0451

Affected Products

Phprojekt

References · 6

• 🔥 http://securityfocus.com/bid/4284 · Exploit
• 🔥 https://exploit-db.com/exploits/21343 · Exploit
• http://iss.net/security_center/static/8448.php · Vendor Advisory
• http://securityfocus.com/archive/1/261676 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0451 · Security Note
• http://phprojekt.com/modules.php?op=modload&name=News&file=article&sid=19&mode=&order= · Note