Vulnerability in Phprojekt

CVE-2001-0648

Directory traversal vulnerability in PHProjekt 2.1 and earlier allows a remote attacker to conduct unauthorized activities via a dot dot (..) attack on the file module.

EPSS: 0.023 (81.8th percentile) — read the EPSS interpretation.

Affected products

  • Phprojekt — versions 2.0, 2.0.1, 2.1
  • N/a — versions n/a

References