Description
Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Metrics
CVSS 2.0 7.5/10
AV:N/AC:L/Au:N/C:P/I:P/A:PAffected software
| Vendor | Product | Versions |
|---|---|---|
| n/a | n/a | n/a |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.htmlPatch, Vendor Advisory
- http://sourceforge.net/tracker/index.php?func=detail&aid=440666&group_id=20971&atid=120971Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/3390Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7215
- http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.htmlPatch, Vendor Advisory
- http://sourceforge.net/tracker/index.php?func=detail&aid=440666&group_id=20971&atid=120971Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/3390Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7215
Timeline
- Published
- Oct 2, 2001
- Last modified
- Jun 16, 2026
- NVD status
- Modified