CVE-2002-1759

UNKNOWN

The upload function in PHProjekt 2

Published Jun 21, 2005

Modified 1 years ago

Details

The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.

References

WEB

http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html

WEB

http://www.securityfocus.com/bid/4597

WEB

https://exchange.xforce.ibmcloud.com/vulnerabilities/8944

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2002-1759

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

NoneC:N

Integrity

PartialI:P

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:N/I:P/A:N

Ecosystems

Timeline

PublishedJun 21, 2005

ModifiedAug 8, 2024