Vulnerabilities

TI-2007-01579 CVE-2007-1639 · GHSA-v5j6-x93w-hw46

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is…

LOW 25

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is t…

CVSS 2.0MEDIUM 4.6 Network Low privileges Interaction — EPSS 0.02054 Published 2007-03-23 No fix listed

TI-2007-01578 CVE-2007-1638 · GHSA-8rvw-5qq8-xmw6

Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken…

LOW 34

Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function in lib/lib.inc.php in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote attackers to perform unauthorized actions…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01778 Published 2007-03-23 No fix listed

TI-2006-04455 CVE-2006-4609 · GHSA-g64v-qpxx-3cw6

Multiple PHP remote file inclusion vulnerabilities in the Content Management module…

LOW 29

Multiple PHP remote file inclusion vulnerabilities in the Content Management module ("Content manager") for PHProjekt 0.6.1, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via the…

CVSS 2.0MEDIUM 5.1 Network No auth Interaction — EPSS 0.03024 Published 2006-09-07 No fix listed

TI-2002-00436 CVE-2002-0451 · GHSA-7cwr-wh5p-wr26

filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute…

MEDIUM 43

filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.07177 Published 2003-04-02 No fix listed

TI-2001-00951 CVE-2001-0995 · GHSA-h9r3-qjcq-v657

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users…

LOW 36

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01588 Published 2002-03-09 No fix listed