CVE-2007-1576

Multiple cross-site scripting (XSS) vulnerabilities in PHProjekt 5.2.0, when magic_quotes_gpc is disabled, allow remote authenticated users to inject arbitrary web script or HTML via unspecified vectors to the (1) Projects, (2) Contacts, (3) Helpdesk, (4) Search (only Gecko engine driven Browsers), and (5) Notes modules; the (6) Mail summary page; and unspecified other files.

• CWE-79

• http://osvdb.org/34064
• http://osvdb.org/34065
• http://osvdb.org/34066
• http://osvdb.org/34067
• http://osvdb.org/34068
• http://osvdb.org/34069
• http://secunia.com/advisories/24509
• http://secunia.com/advisories/25748
• http://security.gentoo.org/glsa/glsa-200706-07.xmlThird Party Advisory
• http://securityreason.com/securityalert/2459
• http://www.nruns.de/security_advisory_phprojekt_xss_and_filter_evasion.phpBroken Link, Vendor Advisory
• http://www.phprojekt.com/index.php?name=News&file=article&sid=276Broken Link, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/462788/100/0/threaded
• http://www.securityfocus.com/bid/22957VDB Entry
• http://osvdb.org/34064
• http://osvdb.org/34065
• http://osvdb.org/34066
• http://osvdb.org/34067
• http://osvdb.org/34068
• http://osvdb.org/34069
• http://secunia.com/advisories/24509
• http://secunia.com/advisories/25748
• http://security.gentoo.org/glsa/glsa-200706-07.xmlThird Party Advisory
• http://securityreason.com/securityalert/2459
• http://www.nruns.de/security_advisory_phprojekt_xss_and_filter_evasion.phpBroken Link, Vendor Advisory
• http://www.phprojekt.com/index.php?name=News&file=article&sid=276Broken Link, Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/462788/100/0/threaded
• http://www.securityfocus.com/bid/22957VDB Entry

Published

Mar 21, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-1570Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-1571PHP remote file inclusion vulnerability in includes/base.php…
• CVE-2007-1572SQL injection vulnerability in search.asp in JGBBS 3.0 Beta …
• CVE-2007-1573SQL injection vulnerability in admincp/attachment.php in Jel…
• CVE-2007-1574CARE2X 2.2, and possibly earlier, allows remote attackers to…
• CVE-2007-1575Multiple SQL injection vulnerabilities in PHProjekt 5.2.0, w…
• CVE-2007-1577Directory traversal vulnerability in index.php in GeBlog 0.1…
• CVE-2007-1578Multiple integer signedness errors in the NTLM implementatio…
• CVE-2007-1579Stack-based buffer overflow in Atrium MERCUR IMAPD allows re…
• CVE-2007-1580FTPDMIN 0.96 allows remote attackers to cause a denial of se…
• CVE-2007-1581The resource system in PHP 5.0.0 through 5.2.1 allows contex…
• CVE-2007-1582The resource system in PHP 4.0.0 through 4.4.6 and 5.0.0 thr…