CVE-2002-1428

CVE-2002-1428 describes an authentication bypass vulnerability in dotProject version 0.2.1.5, specifically within its index.php component. Attackers can exploit this by manipulating a cookie or URL to set the user_cookie parameter to '1', thereby gaining unauthorized access. This flaw carries a critical CVSS score of 10.0, indicating a severe risk with network-based attacks requiring low complexity and resulting in complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, and the vulnerability has garnered significant community discussion, despite no reported active exploitation or media coverage.