Security Advisory
CVE-2004-2740
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in the path_pre parameter.