CVE-2001-0995

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.phprojekt.com/ChangeLogVendor Advisory
http://www.securityfocus.com/archive/1/210349Patch, Vendor Advisory
http://www.securityfocus.com/bid/3239Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7035
http://www.phprojekt.com/ChangeLogVendor Advisory
http://www.securityfocus.com/archive/1/210349Patch, Vendor Advisory
http://www.securityfocus.com/bid/3239Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/7035

Timeline

Published: Aug 31, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-09966.4POP3Lite before 0.2.4 does not properly quote a . (dot) in an email message, which could allow a remote attacker to append arbitrary text to CVE-2001-09977.5Textor Webmasters Ltd listrec.pl CGI program allows remote attackers to execute arbitrary commands via shell metacharacters in the TEMPLATE CVE-2001-09985.0IBM HACMP 4.4 allows remote attackers to cause a denial of service via a completed TCP connection to HACMP ports (e.g., using a port scan) t CVE-2001-09997.5Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is te CVE-2001-10002.1rlmadmin RADIUS management utility in Merit AAA Server 3.8M, 5.01, and possibly other versions, allows local users to read arbitrary files v CVE-2001-10027.5The default configuration of the DVI print filter (dvips) in Red Hat Linux 7.0 and earlier does not run dvips in secure mode when dvips is e CVE-2001-10034.6Respondus 1.1.2 for WebCT uses weak encryption to remember usernames and passwords, which allows local users who can read the WEBCT.SVR file CVE-2001-10045.0Cross-site scripting (CSS) vulnerability in gnut Gnutella client before 0.4.27 allows remote attackers to execute arbitrary script on other CVE-2001-10057.5Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses weak encryption to store the user password in a registry key, which allows a CVE-2001-10065.0Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA does not encrypt sensitive files and relies solely on its password feature to res CVE-2001-10075.0Starfish Truesync Desktop 2.0b as used on the REX 5000 PDA uses a small keyspace for device keys and does not impose a delay when an incorre CVE-2001-10087.5Java Plugin 1.4 for JRE 1.3 executes signed applets even if the certificate is expired, which could allow remote attackers to conduct unauth