CVE-2002-1428

The exploit demonstrates an authentication bypass in dotproject by manipulating the 'user_cookie' parameter to gain administrative access without valid credentials. The issue arises from the software's reliance on the 'cookie_value' for authentication, allowing arbitrary user impersonation.