What’s Vulnerable › Vulnerabilities

CVE-2004-2739

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-12-31 · updated 2026-06-16
• Weakness: CWE-264

Description

The setup routine (setup.php) in PHProjekt 4.2.1 and earlier allows remote attackers to modify system configuration via unknown attack vectors.

Affected products

• Phprojekt: 2.0, 2.0.1, 2.1, 2.1a, 2.2, 2.3 (+6)

References

• http://secunia.com/advisories/13355
• http://securitytracker.com/id?1012369
• http://www.gentoo.org/security/en/glsa/glsa-200412-06.xml
• http://www.novell.com/linux/security/advisories/2004_04_sr.html
• http://www.osvdb.org/12174
• http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=189&mode=thread&order=0
• http://www.securityfocus.com/bid/11797
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18320
• http://secunia.com/advisories/13355
• http://securitytracker.com/id?1012369
• http://www.gentoo.org/security/en/glsa/glsa-200412-06.xml
• http://www.novell.com/linux/security/advisories/2004_04_sr.html

Get alerted when CVE-2004-2739 or the next vulnerability affects your stack