CVE-2001-1357

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published: Feb 7, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-13587.2Vulnerabilities in phpMyChat before 0.14.4 allow local and possibly remote attackers to gain privileges by specifying an alternate library f CVE-2001-135910.0Volution clients 1.0.7 and earlier attempt to contact the computer creation daemon (CCD) when an LDAP authentication failure occurs, which a CVE-2001-13607.2Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5, related to pnm and saned.CVE-2001-13617.5Vulnerability in The Web Information Gateway (TWIG) 2.7.1, possibly related to incorrect security rights and/or the generation of mailto lin CVE-2001-13627.5Vulnerability in the server for nPULSE before 0.53p4.CVE-2001-136310.0Vulnerability in phpWebSite before 0.7.9 related to running multiple instances in the same domain, which may allow attackers to gain adminis CVE-2001-13647.5Vulnerability in autodns.pl for AutoDNS before 0.0.4 related to domain names that are not fully qualified.CVE-2001-13657.5Vulnerability in IntraGnat before 1.4.CVE-2001-13665.0netscript before 1.6.3 parses dynamic variables, which could allow remote attackers to alter program behavior or obtain sensitive informatio CVE-2001-136710.0The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative acce CVE-2001-13685.0Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corr CVE-2001-13697.5Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account