Unscored CVE-2001-0995 EUVD-2001-0977GHSA-h9r3-qjcq-v657

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to …

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

References

http://www.phprojekt.com/ChangeLog
phprojekt-id-modify(7035) vdb-entry
3239 vdb-entry
20010826 security hole in os groupware suite PHProjekt mailing-list