← Database

CVE-2004-2740

MEDIUM CVSS: 4.3 Published: 2004-12-31 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in the path_pre parameter.

Affected Platforms

Phprojekt Phprojekt

Weakness Type

CWE-94

References