NVD

Id
78805  
Name
CVE-2001-1370  
Description
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-05  
Published
2001-07-21  
Modified Date
2016-10-17  
Seq
2001-1370  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
393572 78805 CVE-2001-1370 CSSA-2001-027.0  View
393573 78805 CVE-2001-1370 CLA-2001:410  View
393574 78805 CVE-2001-1370 20010726 TSLSA-2001-0014 - PHPLib  View
393575 78805 CVE-2001-1370 20010721 IMP 2.2.6 (SECURITY) released  View
393576 78805 CVE-2001-1370 DSA-073  View
393577 78805 CVE-2001-1370 phplib-script-execution(6892)  View
393578 78805 CVE-2001-1370 20010722 [SEC] Hole in PHPLib 7.2 prepend.php3  View
393579 78805 CVE-2001-1370 3079  View

Related JVN