CVE-2008-6747

CVE-2008-6747 affects dotProject prior to 2.1.2. The issue is that access to administrative pages is not properly restricted, enabling remote attackers to gain privileges. Public details in the connected docs consistently identify a privilege-escalation vulnerability in dotProject