CVE-2001-0995 - CVE House
Back to Database
Status published High CVE-2001-0995

PHProjekt before 2.4a allows remote attackers to perform actions as...

Vulnerability Description

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-0995

Credits & Attribution

No credits recorded in the NVD database.

References

More from phpprojekt

View All →
CVE-2007-1639
Unrestricted file upload vulnerability in PHProjekt 5.2.0, when magic_quotes_gpc is...
Medium 4.6
CVE-2007-1638
Multiple cross-site request forgery (CSRF) vulnerabilities in the check_csrftoken function...
Medium 6.8
CVE-2006-4609
Multiple PHP remote file inclusion vulnerabilities in the Content Management...
Medium 5.1
CVE-2002-0451
filemanager_forms.php in PHProjekt 3.1 and 3.1a allows remote attackers to...
High 7.5

Affected Vendor

Affected Software

phpprojekt
Vulnerable Versions:
0, 2.0, 2.0.1, 2.1, 2.1a, 2.2, 2.3

Timeline

Official Publish: March 9th, 2002
Last Modified: August 8th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.