PT-2002-2481 · Phprojekt · Phprojekt

Published 2002-12-31 · Updated 2017-07-12 · CVE-2002-1759

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHProjekt versions 2.0 through 3.1

Description The issue concerns the upload function, which does not properly verify certain variables related to uploaded data. This allows remote attackers to cause PHProjekt to process arbitrary files.

Recommendations For PHProjekt versions 2.0 through 3.1, consider disabling the upload function until a patch is available to prevent remote attackers from processing arbitrary files.

Fix

Related Identifiers

CVE-2002-1759

Affected Products

Phprojekt

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2002-1759 · Security Note
• http://securityfocus.com/bid/4597 · Patch
• http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/8944 · Note