CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.0. It may be remotely exploitable. It involves a SQL injection risk. Exploitation may require the attacker to be authenticated.
CVE
CVE-2008-3887
Severity
MEDIUM
CVSS
6
EPSS
0.93%
Original NVD Description
Multiple SQL injection vulnerabilities in index.php in dotProject 2.1.2 allow (1) remote authenticated users to execute arbitrary SQL commands via the tab parameter in a projects action, and (2) remote authenticated administrators to execute arbitrary SQL commands via the user_id parameter in a viewuser action.