| Package | Affected versions | Patched versions |
|---|---|---|
| phpprojekt | = 5.2.0 |
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allows remote authenticated users to upload and execute arbitrary PHP code via a file with an executable extension, which is then accessed by the (1) calendar or (2) file management module, or possibly unspecified other files.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free