Vulnerabilities > Phpprojekt
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2007-03-23 | CVE-2007-1639 | Unspecified vulnerability in PHPprojekt 5.2.0 Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the (1) calendar or (2) file management module, or possibly unspecified other files. | 4.6 |
| 2007-03-23 | CVE-2007-1638 | Cross-Site Request Forgery vulnerability in PHPprojekt 5.2.0 Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function in lib/lib.inc.php in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote attackers to perform unauthorized actions as an arbitrary user via the (1) Projects, (2) Contacts, (3) Helpdesk, (4) Notes, (5) Search, (6) Mail, or (7) Filemanager module; the (9) summary page; or unspecified other files. network phpprojekt | 6.8 |
| 2002-08-12 | CVE-2002-0451 | Remote File Include vulnerability in PHPprojekt 3.1/3.1A filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter. | 7.5 |
| 2001-08-31 | CVE-2001-0995 | Unspecified vulnerability in PHPprojekt PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs. | 7.5 |