CVE-2002-1757
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.14%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using "mail_send.php/sms".
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 3.14% probability · 87th percentile
- CISA KEV
- Not listed
- Affected
- phprojekt/phprojekt
- Source
- cve@mitre.org
References
- http://online.securityfocus.com/archive/1/269407
- http://www.securityfocus.com/bid/4596Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8943
- http://online.securityfocus.com/archive/1/269407
- http://www.securityfocus.com/bid/4596Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8943
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.