Unrated severityNVD Advisory· Published Mar 21, 2007· Updated Apr 23, 2026
CVE-2007-1575
CVE-2007-1575
Description
Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticated users to execute arbitrary SQL commands via (1) unspecified vectors to the (a) calendar and (2) search modules, and an (2) unspecified cookie when the user logs out.
Affected products
4Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- www.phprojekt.com/index.phpnvdPatchVendor Advisory
- www.nruns.com/security_advisory_phprojekt_sql_injection.phpnvdVendor Advisory
- secunia.com/advisories/24509nvd
- secunia.com/advisories/25748nvd
- security.gentoo.org/glsa/glsa-200706-07.xmlnvd
- securityreason.com/securityalert/2466nvd
- www.securityfocus.com/archive/1/462789/100/0/threadednvd
- www.securityfocus.com/bid/22955nvd
News mentions
0No linked articles in our index yet.