CVE

Id
24996  
CVE No.
CVE-2007-1639  
Status
Candidate  
Description
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the (1) calendar or (2) file management module, or possibly unspecified other files.  
Phase
Assigned (20070323)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
248134 24996 CVE-2007-1639 BUGTRAQ:20070314 n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation  View
248135 24996 CVE-2007-1639 URL:http://www.securityfocus.com/archive/1/archive/1/462785/100/100/threaded  View
248136 24996 CVE-2007-1639 MISC:http://www.nruns.de/security_advisory_phprojekt_privilege_escalation.php  View
248137 24996 CVE-2007-1639 CONFIRM:http://www.phprojekt.com/index.php?name=News&file=article&sid=276  View
248138 24996 CVE-2007-1639 GENTOO:GLSA-200706-07  View
248139 24996 CVE-2007-1639 URL:http://security.gentoo.org/glsa/glsa-200706-07.xml  View
248140 24996 CVE-2007-1639 BID:22956  View
248141 24996 CVE-2007-1639 URL:http://www.securityfocus.com/bid/22956  View
248142 24996 CVE-2007-1639 OSVDB:35163  View
248143 24996 CVE-2007-1639 URL:http://osvdb.org/35163  View
248144 24996 CVE-2007-1639 SECUNIA:24509  View
248145 24996 CVE-2007-1639 URL:http://secunia.com/advisories/24509  View
248146 24996 CVE-2007-1639 SECUNIA:25748  View
248147 24996 CVE-2007-1639 URL:http://secunia.com/advisories/25748  View
248148 24996 CVE-2007-1639 SREASON:2476  View
248149 24996 CVE-2007-1639 URL:http://securityreason.com/securityalert/2476  View
248150 24996 CVE-2007-1639 XF:phprojekt-calendarfile-file-upload(32995)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
56616 JVNDB-2007-005308 PortailPHP の index.php における SQL インジェクションの脆弱性 PortailPHP の index.php には、SQL インジェクションの脆弱性が存在します。 CVE-2007-1641 24996 7.5 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005308.html  View