Gentoo Security Advisory GLSA 200706-07 (phprojekt)

The remote host is missing updates announced in advisory GLSA 200706-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1576

PHProjekt 5.2.0 is affected by CVE-2007-1576 (XSS) when magic_quotes_gpc is disabled, allowing an authenticated user to inject script/HTML through multiple modules (Projects, Contacts, Helpdesk, Search, Notes, Mail summary page, etc.). Gentoo GLSA 200706-07 recommends upgrading to PHProjekt-5.2.1...