NVD

Id
53823  
Name
CVE-2007-1639  
Description
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the (1) calendar or (2) file management module, or possibly unspecified other files.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2007-03-23  
Modified Date
2008-11-13  
Seq
2007-1639  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
272759 53823 CVE-2007-1639 GLSA-200706-07  View
272760 53823 CVE-2007-1639 2476  View
272761 53823 CVE-2007-1639 http://www.nruns.de/security_advisory_phprojekt_privilege_escalation.php  View
272762 53823 CVE-2007-1639 http://www.phprojekt.com/index.php?name=News&file=article&sid=276  View
272763 53823 CVE-2007-1639 20070314 n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation  View
272764 53823 CVE-2007-1639 22956  View
272765 53823 CVE-2007-1639 phprojekt-calendarfile-file-upload(32995)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56615 JVNDB-2007-005307 PHProjekt における任意のコードを実行される脆弱性 PHProjekt は、magic_quotes_gpc が無効になっている際、無制限にファイルをアップロードする不備があるため、任意の PHP コードをアップロードおよび実行される脆弱性が存在します。 CVE-2007-1639 24994 CVE-2007-1639 53823 4.6 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005307.html 2007-03-23 2012-12-20 View