CVE-2001-0995
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by...
CVE-2001-0995 is a high vulnerability (CVSS 7.5) in Phpprojekt, published August 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.59%, the 76th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 1.59%EPSS, 76th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
Exploit likelihood
Affected products
What each source reports
NVD Score used
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
- Record
CVE-2001-0995- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
- Record
CVE-2001-0995- Updated
- 2026-11-02
EUVDEUVD-2001-0977No score
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
- Record
EUVD-2001-0977- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h9r3-qjcq-v657No score
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by...
PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.
- Record
GHSA-h9r3-qjcq-v657- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.