Gentoo: 202401-15 Alert: PHProjekt Vulnerability Remote Exploit Risk

Gentoo Linux Security Advisory GLSA 200412-27 https://security.gentoo.org/ Severity: High Title: PHProjekt: Remote code execution vulnerability Date: December 30, 2004 Bugs: #75858 ID: 200412-27

Synopsis ======= PHProjekt contains a vulnerability that allows a remote attacker to execute arbitrary PHP code.
Background ========= PHProjekt is a modular groupware web application used to coordinate group activities and share files.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/phprojekt < 4.2-r2 >= 4.2-r2
========== cYon discovered that the authform.inc.php script allows a remote user to define the global variable $path_pre.
Impact ===== A remot...