← Database

CVE-2007-5486

MEDIUM CVSS: 6.4 Published: 2007-10-16 Modified: 2026-06-16

Description

dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attackers to access this module via a crafted URL. NOTE: some of these details are obtained from third party information.

Affected Platforms

Dotproject Dotproject

Weakness Type

CWE-264

References