Lucene search

[email protected]NVD:CVE-2002-1757

HistoryDec 31, 2002 - 5:00 a.m.

CVE-2002-1757

2002-12-3105:00:00

[email protected]

web.nvd.nist.gov

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.5%

JSON

PHProjekt 2.0 through 3.1 relies on the $PHP_SELF variable for authentication, which allows remote attackers to bypass authentication for scripts via a request to a .php file with “sms” in the URL, which is included in the PATH_INFO portion of the $PHP_SELF variable, as demonstrated using “mail_send.php/sms”.

Affected configurations

NVD

Node

phprojektphprojektMatch2.0

phprojektphprojektMatch2.0.1

phprojektphprojektMatch2.1

phprojektphprojektMatch2.1a

phprojektphprojektMatch2.2

phprojektphprojektMatch2.3

phprojektphprojektMatch2.4

phprojektphprojektMatch2.4a

phprojektphprojektMatch3.0

phprojektphprojektMatch3.1

phprojektphprojektMatch3.1a

References

online.securityfocus.com/archive/1/269407

www.securityfocus.com/bid/4596

exchange.xforce.ibmcloud.com/vulnerabilities/8943

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.022 Low

EPSS

Percentile

89.5%

JSON

Related for NVD:CVE-2002-1757

cve1 cvelist1