VulnerabilityModified
CVE-2002-1759
The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.
MEDIUM 5.0EPSS 2.06%
Does this matter?
Lower severity and a low EPSS score (2.06%). Track it; it rarely justifies an emergency change on its own.
Description
The upload function in PHProjekt 2.0 through 3.1 does not properly verify certain variables related to uploaded data, which allows remote attackers to cause PHProjekt to process arbitrary files.
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:P/A:N
- EPSS
- 2.06% probability · 80th percentile
- CISA KEV
- Not listed
- Affected
- phprojekt/phprojekt
- Source
- cve@mitre.org
References
- http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html
- http://www.securityfocus.com/bid/4597Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8944
- http://archive.cert.uni-stuttgart.de/archive/bugtraq/2002/04/msg00361.html
- http://www.securityfocus.com/bid/4597Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/8944
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.