CVE-2001-1298

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html
http://www.iss.net/security_center/static/7215.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/3385Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html
http://www.iss.net/security_center/static/7215.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/3385Vendor Advisory

Timeline

Published: Oct 2, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-12995.0Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that set CVE-2001-13005.0Directory traversal vulnerability in Dynu FTP server 1.05 and earlier allows remote attackers to read arbitrary files via a .. in the CD (CW CVE-2001-13011.2rcs2log, as used in Emacs 20.4, xemacs 21.1.10 and other versions before 21.4, and possibly other packages, allows local users to modify fil CVE-2001-13022.1The change password option in the Windows Security interface for Windows 2000 allows attackers to use the option to attempt to change passwo CVE-2001-13035.0The default configuration of SecuRemote for Check Point Firewall-1 allows remote attackers to obtain sensitive configuration information for CVE-2001-13045.0Buffer overflow in SHOUTcast Server 1.8.2 allows remote attackers to cause a denial of service (crash) via several HTTP requests with a long CVE-2001-13055.0ICQ 2001a Alpha and earlier allows remote attackers to automatically add arbitrary UINs to an ICQ user's contact list via a URL to a web pag CVE-2001-13067.5iPlanet Directory Server 4.1.4 and earlier (LDAP) allows remote attackers to cause a denial of service (crash) and possibly execute arbitrar CVE-2001-13077.5Buffer overflows in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (crash) and possib CVE-2001-13087.5Format string vulnerabilities in iPlanet Directory Server 4.1.4 and earlier (LDAP) allow remote attackers to cause a denial of service (cras CVE-2001-13097.5Buffer overflows in IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, as CVE-2001-13107.5IBM SecureWay 3.2.1 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code, via invalid encodings f