CVE-2008-6747: Dotproject

Medium severity, CVSS 6.8. EPSS: 1.2% chance of exploitation in the next 30 days.

dotProject before 2.1.2 does not properly restrict access to administrative pages, which allows remote attackers to gain privileges. NOTE: some of these details are obtained from third party information.

Affected products

• Dotproject Dotproject: up to and including 2.1.1; version 0.2.1.5 only; version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; …

Published 2009-04-23. Last modified 2026-06-16.