CVE-2001-1370

prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:phplib_team:phplib:7.2:*:*:*:*:*:*:*
cpe:2.3:a:phplib_team:phplib:7.2.1:*:*:*:*:*:*:*
cpe:2.3:a:phplib_team:phplib:7.2b:*:*:*:*:*:*:*
cpe:2.3:a:phplib_team:phplib:7.2c:*:*:*:*:*:*:*

History

No history.

Information

Published : 2001-07-21 04:00

Updated : 2024-02-04 16:31


NVD link : CVE-2001-1370

Mitre link : CVE-2001-1370

CVE.ORG link : CVE-2001-1370


JSON object : View

Products Affected

phplib_team

  • phplib