 |
|
|
PHProjekt Security Vulnerability
Last
Updated:
February 4, 2012
Found: 12-02-2004
Martin Munch form it-spec has reported a securty hole in the setup routine of PHPProjeckt. Once the vulnerability is exploited it will give someone administration rights so that they have access to the setup routine. They then could change the entire configuration of the PHPProjeckt installation.
If you are using any version of PHPProjeckt you need to download the latest version which has a fixed version of the setup.php file.
Download the patch:
http://phprojekt.com/files/4.2/setup.zip
Apply the new file into the root directory and you are patched. |
|
 |
|