CVE-2007-5641

CVE-2007-5641 affects PHP Project Management 0.8.10 and earlier. The vulnerability is a remote file inclusion (RFI) weakness allowing an attacker to supply a URL in the full_path parameter to multiple modules (e.g., certinfo, emails, events, files, projects, etc.) to execute arbitrary PHP code on...

CVE-2007-5642

CVE-2007-5642 affects PHP Project Management 0.8.10 and earlier. The issue is multiple directory traversal vulnerabilities that allow remote attackers to include and execute arbitrary local files by supplying a .. (dot dot) sequence in various parameters across modules (def_lang in modules/files/...