CVE-2007-5486

2007-10-16T23:17:00
ID CVE-2007-5486
Type cve
Reporter cve@mitre.org
Modified 2017-07-29T01:33:00

Description

dotProject before 2.1 does not properly check privileges when invoking the Companies module, which allows remote attackers to access this module via a crafted URL. NOTE: some of these details are obtained from third party information.