CVE-2002-0451: Phpprojekt

High severity, CVSS 7.5. EPSS: 7.2% chance of exploitation in the next 30 days.

filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to execute arbitrary PHP code by specifying the URL to the code in the lib_path parameter.

Affected products

• Phpprojekt Phpprojekt: version 3.1 only; version 3.1a only

Published 2002-08-12. Last modified 2026-06-16.