high7.5
CVE-2001-0995
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI progra…
Impact
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpprojekt | Phpprojekt | through 2.4a Versions 2.0, 2.0.1, 2.1, 2.1a, 2.2 |
References
- NVD record
- CVE.org record
- http://www.phprojekt.com/ChangeLog
- http://www.securityfocus.com/archive/1/210349
- http://www.securityfocus.com/bid/3239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7035
- http://www.phprojekt.com/ChangeLog
- http://www.securityfocus.com/archive/1/210349
- http://www.securityfocus.com/bid/3239
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7035