CVE-2001-0995

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2001-08-31

Last modified

2024-08-08

Affected products

• Phpprojekt (Phpprojekt)

References

• http://www.phprojekt.com/ChangeLog
• http://www.securityfocus.com/archive/1/210349
• http://www.securityfocus.com/bid/3239
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7035