Security hole in setup routine!

01. Dez 2004   

Martin Münch from it-sec reported a security hole in the setup routine of PHProjekt! By exploiting this hole it is possible for someone without admin rights to intrude into the setup routine and e.g. change the configuration of the PHProjekt installation.

This security hole concerns all versions of PHProjekt. Please download this version of setup.php to obtain the security fix, unpack it and replace the file from the root directory.

Thanks goes to Martin Münch for reporting the bug, if you have any further comment or question on this please post it in the forum.

take care
Albrecht

Verfasst von  albrecht