Description
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the (1) calendar or (2) file management module, or possibly unspecified other files.
References
- http://www.nruns.de/security_advisory_phprojekt_privilege_escalation.php
- 20070314 n.runs-SA-2007.006 - PHProjekt 5.2.0 - Privilege escalation mailing-list
- 22956 vdb-entry
- 24509 third-party-advisory
- http://www.phprojekt.com/index.php?name=News&file=article&sid=276
- phprojekt-calendarfile-file-upload(32995) vdb-entry
- 2476 third-party-advisory
- GLSA-200706-07 vendor-advisory
- 35163 vdb-entry
- 25748 third-party-advisory