CVE-2002-1757

PHProjekt 2.0–3.1 uses the $PHP_SELF variable for authentication, allowing remote attackers to bypass authentication for scripts via a PATH_INFO path (example: mail_send.php/sms). Affected: PHProjekt 2.0–3.1; Root cause: improper reliance on PATH_INFO in $PHP_SELF for auth. Impact: unauthorized a...