CVE-2002-1759

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.

Affected (11)

Products: Phprojekt: Phprojekt

Phprojekt

1 product

Phprojekt

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Phprojekt Phprojekt	Version 2.0.1
Phprojekt Phprojekt	Version 2.0
Phprojekt Phprojekt	Version 2.1
Phprojekt Phprojekt	Version 2.1a
Phprojekt Phprojekt	Version 2.2
Phprojekt Phprojekt	Version 2.3
Phprojekt Phprojekt	Version 2.4
Phprojekt Phprojekt	Version 2.4a
Phprojekt Phprojekt	Version 3.0
Phprojekt Phprojekt	Version 3.1
Phprojekt Phprojekt	Version 3.1a

References (6)

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html

Source: cve@mitre.org

http://www.securityfocus.com/bid/4597

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/8944

Source: cve@mitre.org

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/4597

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/8944

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.