CVE-2002-1757 in PHProjekt
Summary
PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with "sms" in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using "mail_send.php/sms".
Reservation
06/21/2005
Disclosure
12/31/2002
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 19400 | PHProjekt privileges management | 269 | Proof-of-Concept | Not defined | CVE-2002-1757 |