Gentoo Security Advisory GLSA 200706-07 (phprojekt)

The remote host is missing updates announced in advisory GLSA 200706-07. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2007-1638

PHProjekt 5.2.0 is affected by multiple CSRF vulnerabilities in the check_csrftoken function when magic_quotes_gpc is disabled, enabling unauthorized actions as an arbitrary user via (1) Projects, (2) Contacts, (3) Helpdesk, (4) Notes, (5) Search, (6) Mail, (7) Filemanager modules and the (9) sum...