Vulnerability in Dotproject

CVE-2002-1428

index.php in dotProject 0.2.1.5 allows remote attackers to bypass authentication via a cookie or URL with the user_cookie parameter set to 1.

EPSS: 0.055 (92.0th percentile) — read the EPSS interpretation.

Affected products

  • Dotproject — versions 0.2.1.5
  • N/a — versions n/a

References

  • cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
  • cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)
  • cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)