CVE-2007-1639 - CVE House
Back to Database
Status published Medium CVE-2007-1639

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is...

Vulnerability Description

Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the (1) calendar or (2) file management module, or possibly unspecified other files.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1639

Credits & Attribution

No credits recorded in the NVD database.

References

More from phpprojekt

View All →
CVE-2007-1638
Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function...
Medium 6.8
CVE-2006-4609
Multiple PHP remote file inclusion vulnerabilities in the Content Management...
Medium 5.1
CVE-2002-0451
filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to...
High 7.5
CVE-2001-0995
PHProjekt before 2.4a allows remote attackers to perform actions as...
High 7.5

Affected Vendor

Affected Software

phpprojekt
Vulnerable Versions:
5.2.0

Timeline

Official Publish: March 23rd, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.