CVE-2007-1576

Related Files

Gentoo Linux Security Advisory 200706-7

Posted Jun 21, 2007

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200706-07 - Alexios Fakos from n.runs AG has discovered multiple vulnerabilities in PHProjekt, including the execution of arbitrary SQL commands using unknown vectors (CVE-2007-1575), the execution of arbitrary PHP code using an unrestricted file upload (CVE-2007-1639), cross-site request forgeries using different modules (CVE-2007-1638), and a cross-site scripting attack using unknown vectors (CVE-2007-1576). Versions less than 5.2.1 are affected.

tags | advisory, arbitrary, php, vulnerability, xss, file upload

systems | linux, gentoo

advisories | CVE-2007-1575, CVE-2007-1576, CVE-2007-1638, CVE-2007-1639

SHA-256 | 32e1a1bd5e7b7ce827d5f2dee5bdea8dd5fa451b945e4c3a0c11088f11815542

Download | Favorite | View