Phprojekt · Phprojekt · CVE-2004-2739
**Name of the Vulnerable Software and Affected Versions**
PHProjekt versions 4.2.1 and earlier
**Description**
The issue allows remote attackers to modify system configuration. This is possible due to a problem in the setup routine, specifically in the setup.php file.
**Recommendations**
For PHProjekt versions 4.2.1 and earlier, consider restricting access to the setup.php file until a patch is available. As a temporary workaround, limit the functionality of the setup routine to prevent unauthorized configuration changes. At the moment, there is no information about a newer version that contains a fix for this vulnerability.