CVE-2001-1049

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2001-10-02

Last modified

2024-08-08

Affected products

• Phorecast (Paul M. Jones)

References

• http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html
• http://phorecast.org/
• http://www.iss.net/security_center/static/7215.php
• http://www.securityfocus.com/bid/3388