CVE-2001-0995

PHProjekt before 2.4a allows remote attackers to perform actions as other PHProjekt users by modifying the ID number in an HTTP request to PHProjekt CGI programs.

Date published : 2002-03-09

http://www.securityfocus.com/bid/3239

http://www.securityfocus.com/archive/1/210349