CVE

Id
4174  
CVE No.
CVE-2001-1370  
Status
Entry  
Description
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
19555 4174 CVE-2001-1370 BUGTRAQ:20010722 [SEC] Hole in PHPLib 7.2 prepend.php3  View
19556 4174 CVE-2001-1370 URL:http://www.securityfocus.com/archive/1/198768  View
19557 4174 CVE-2001-1370 BUGTRAQ:20010726 TSLSA-2001-0014 - PHPLib  View
19558 4174 CVE-2001-1370 URL:http://marc.info/?l=bugtraq&m=99616122712122&w=2  View
19559 4174 CVE-2001-1370 BUGTRAQ:20010721 IMP 2.2.6 (SECURITY) released  View
19560 4174 CVE-2001-1370 URL:http://online.securityfocus.com/archive/1/198495  View
19561 4174 CVE-2001-1370 CONECTIVA:CLA-2001:410  View
19562 4174 CVE-2001-1370 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410  View
19563 4174 CVE-2001-1370 CALDERA:CSSA-2001-027.0  View
19564 4174 CVE-2001-1370 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-027.0.txt  View
19565 4174 CVE-2001-1370 DEBIAN:DSA-073  View
19566 4174 CVE-2001-1370 URL:http://www.debian.org/security/2001/dsa-073  View
19567 4174 CVE-2001-1370 BID:3079  View
19568 4174 CVE-2001-1370 URL:http://www.securityfocus.com/bid/3079  View
19569 4174 CVE-2001-1370 XF:phplib-script-execution(6892)  View

Related JVN