CVEvulnerability
CVE-2008-6747
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-04-23
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
dotProject before 2.1.2 does not properly restrict access to administrative pages, which allows remote attackers to gain privileges. NOTE: some of these details are obtained from third party information.
Affected configurations
• dotproject dotproject (<= 2.1.1)
• dotproject dotproject 0.2.1.5
• dotproject dotproject 2.0
• dotproject dotproject 2.0.1
• dotproject dotproject 2.0.2
• dotproject dotproject 2.0.3
• dotproject dotproject 2.0.4
• dotproject dotproject 2.1
• dotproject dotproject 2.1.0
Related
Weakness · not in database (1)
References
- http://osvdb.org/46143 osvdb.org
- http://secunia.com/advisories/30470 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?group_id=21656&release_id=616346 sourceforge.net
- http://www.securityfocus.com/bid/29679 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43019 exchange.xforce.ibmcloud.com
- http://osvdb.org/46143 osvdb.org
- http://secunia.com/advisories/30470 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?group_id=21656&release_id=616346 sourceforge.net
- http://www.securityfocus.com/bid/29679 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43019 exchange.xforce.ibmcloud.com