CVE-2001-0995: Phpprojekt

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Affected products

• Phpprojekt Phpprojekt: up to and including 2.4a; version 2.0 only; version 2.0.1 only; version 2.1 only; version 2.1a only; version 2.2 only; …

Published 2001-08-31. Last modified 2026-06-16.