Approved changes feed: RSS · Atom

cpe:2.3:a:dotproject:dotproject:2.0.2:*:*:*:*:*:*:*

part: a version: 2.0.2 update: *

VendorDotproject (65a20d57-4ad4-5fa0-91f5-7435f67deebb)
ProductDotproject (6bf93e11-1b44-5b71-99ea-70da13aa14a3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/diontruter/dotproject purl2cpe 2026-06-01 10:10:59.924057
pkg:github/dotproject/dotproject purl2cpe 2026-06-01 10:10:59.924058
pkg:sourceforge/dotproject purl2cpe 2026-06-01 10:10:59.924060

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-6747 vulnerable 2026-06-08 04:51:04.769342 Details available
dotProject before 2.1.2 does not properly restrict access to administrative pages, which allows remote attackers to gain privileges. NOTE: some of these details are obtained from third party information.
Published: 2009-04-23T17:00:00.000Z
Updated: 2024-08-07T11:42:00.118Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4234 vulnerable 2026-06-08 04:49:11.287651 Details available
PHP remote file inclusion vulnerability in classes/query.class.php in dotProject 2.0.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the baseDir parameter.
Published: 2006-08-18T19:55:00.000Z
Updated: 2024-08-07T19:06:06.312Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2851 vulnerable 2026-06-08 04:49:07.694517 Details available
Cross-site scripting (XSS) vulnerability in index.php in dotProject 2.0.2 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified parameters, which are not properly handled when the client is using Internet Explorer.
Published: 2006-06-06T20:03:00.000Z
Updated: 2024-08-07T18:06:26.985Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.