Skip to content

CVE-2001-0995

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by...

7.5 High

CVE-2001-0995 is a high vulnerability (CVSS 7.5) in Phpprojekt, published August 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 75th percentile. No source names a fixed version.

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Exploit likelihood

1.59%Up 0.4 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Record: CVE-2001-0995
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Record: CVE-2001-0995
Updated: 2026-11-02

EUVDEUVD-2001-0977 No score

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Record: EUVD-2001-0977
Updated: 2026-11-03

GitHub AdvisoriesGHSA-h9r3-qjcq-v657 No score

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by...

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Record: GHSA-h9r3-qjcq-v657
Updated: 2026-11-02

Affected products

phpprojekt

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References