CVE-2001-1049

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Oct 2, 2001
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2001

CVE-2001-10507.5CCCSoftware CCC PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includCVE-2001-10517.5Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sCVE-2001-10527.5Empris PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variCVE-2001-105310.0AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $paCVE-2001-10547.5PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir vCVE-2001-10555.0The Microsoft Windows network stack allows remote attackers to cause a denial of service (CPU consumption) via a flood of malformed ARP requCVE-2001-10567.5IRC DCC helper in the ip_masq_irc IP masquerading module 2.2 allows remote attackers to bypass intended firewall restrictions by causing theCVE-2001-10575.0The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to cause a denial of service (resource exhaustion) by conneCVE-2001-10587.5The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argumeCVE-2001-10593.6VMWare creates a temporary file vmware-log.USERNAME with insecure permissions, which allows local users to read or modify license informatioCVE-2001-10607.5phpMyAdmin 2.2.0rc3 and earlier allows remote attackers to execute arbitrary commands by inserting them into (1) the strCopyTableOK argumentCVE-2001-106110.0Vulnerability in lsmcode in unknown versions of AIX, possibly related to a usage error.
CVE-2001-1049: High severity, CVSS 7.5 | Vulnix