PHProjekt Unauthorized Script Access Vulnerability
BID:4599
Info
PHProjekt Unauthorized Script Access Vulnerability
| Bugtraq ID: | 4599 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 25 2002 12:00AM |
| Updated: | Apr 25 2002 12:00AM |
| Credit: | Discovery of this issue is credited to Ulf Harnhammar <[email protected]>. |
| Vulnerable: |
PHProjekt PHProjekt 3.1 a PHProjekt PHProjekt 3.1 PHProjekt PHProjekt 3.0 PHProjekt PHProjekt 2.4 a PHProjekt PHProjekt 2.4 PHProjekt PHProjekt 2.3 PHProjekt PHProjekt 2.2 PHProjekt PHProjekt 2.1 a PHProjekt PHProjekt 2.1 PHProjekt PHProjekt 2.0.1 PHProjekt PHProjekt 2.0 |
| Not Vulnerable: |
PHProjekt PHProjekt 3.2 |
Discussion
PHProjekt Unauthorized Script Access Vulnerability
PHProjekt is a freely available, open source PHP Groupware package. It is actively maintained by the PHProjekt Development Team. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems.
Some of the PHProjekt scripts are only intended to be accessed by users who have been authenticated. Attackers may submit data using the HTTP POST method to view or edit data contained in scripts that normally require authentication to be accessed.
PHProjekt is a freely available, open source PHP Groupware package. It is actively maintained by the PHProjekt Development Team. It will run on most Linux and Unix variants, in addition to Microsoft Windows operating systems.
Some of the PHProjekt scripts are only intended to be accessed by users who have been authenticated. Attackers may submit data using the HTTP POST method to view or edit data contained in scripts that normally require authentication to be accessed.
Exploit / POC
PHProjekt Unauthorized Script Access Vulnerability
There is no exploit code required to exploit this vulnerability.
There is no exploit code required to exploit this vulnerability.