Description
The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors.
References
- phprojekt-setup-command-execution(18320) vdb-entry
- 11797 vdb-entry
- GLSA-200412-06 vendor-advisory
- SuSE-SR:2004:004 vendor-advisory
- 1012369 vdb-entry
- 13355 third-party-advisory
- 12174 vdb-entry
- http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=189&mode=thread&order=0