CVEvulnerability

CVE-2002-1759

5.0 MEDIUM Published 2002-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.

Affected configurations

• phprojekt phprojekt 2.0 • phprojekt phprojekt 2.0.1 • phprojekt phprojekt 2.1 • phprojekt phprojekt 2.1a • phprojekt phprojekt 2.2 • phprojekt phprojekt 2.3 • phprojekt phprojekt 2.4 • phprojekt phprojekt 2.4a • phprojekt phprojekt 3.0 • phprojekt phprojekt 3.1 • phprojekt phprojekt 3.1a

Related

Referenced by CWE · observed example (1)

  • CWE-616 Incomplete Identification of Uploaded File Variables (PHP) weakness

References