PHProjekt: setup.php vulnerability

Background PHProjekt is a modular groupware web application used to coordinate group activities and share files. Description Martin Muench, from it.sec, found a flaw in the setup.php file. Impact Successful exploitation of the flaw allows a remote attacker without admin rights to make unauthorize...

[SA13355] PHProjekt Unspecified "setup.php" Security Bypass Vulnerability

TITLE: PHProjekt Unspecified "setup.php" Security Bypass Vulnerability SECUNIA ADVISORY ID: SA13355 VERIFY ADVISORY: http://secunia.com/advisories/13355/ CRITICAL: Moderately critical IMPACT: Security Bypass WHERE: From remote SOFTWARE: PHProjekt 4.x http://secunia.com/product/4346/ DESCRIPTION:...

osTicket setup.php Accessibility

The target is running at least one instance of an improperly secured installation of osTicket and allows access to setup.php. Since that script does not require authenticated access, it is possible for an attacker to modify osTicket's configuration using a specially crafted call to setup.php to...