NetSight
IP …
medium4.3

CVE-2004-2740

PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in t…

Impact

PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in the path_pre parameter.

Affected products

VendorProductAffected versions
PhprojektPhprojekt
Versions 2.0, 2.0.1, 2.1, 2.1a, 2.2, 2.3

Weakness classification

CWE-94

References