CVE-2001-1054 - PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable

HIGH

PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable

Published Mar 9, 2002

7.5

HIGH

CVSS 2.0

EPSS 1.59%

PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html		mailing-listx_refsource_BUGTRAQPatchVendor Advisory
http://sourceforge.net/forum/forum.php?forum_id=117952		x_refsource_CONFIRM
http://sourceforge.net/forum/forum.php?thread_id=148900&forum_id=117952		x_refsource_CONFIRM
http://www.iss.net/security_center/static/7215.php		vdb-entryx_refsource_XF
http://www.securityfocus.com/bid/3392		vdb-entryx_refsource_BIDPatchVendor Advisory

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published Mar 9, 2002

Updated Aug 8, 2024

Reserved Jan 31, 2002

Updated n/a

Status Modified

Modified Jun 16, 2026

Severity n/a

Public date n/a