CVE-2001-1367

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.htmlVendor Advisory
http://phpslice.org/comments.php?aid=1031&URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/9649
http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.htmlVendor Advisory
http://phpslice.org/comments.php?aid=1031&URL Repurposed
https://exchange.xforce.ibmcloud.com/vulnerabilities/9649

Timeline

Published: Jul 19, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-13685.0Vulnerability in iPlanet Web Server 4 included in Virtualvault Operating System (VVOS) 4.0 running HP-UX 11.04 could allow attackers to corr CVE-2001-13697.5Leon J Breedt pam-pgsql before 0.5.2 allows remote attackers to execute arbitrary SQL code and bypass authentication or modify user account CVE-2001-137010.0prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HT CVE-2001-13717.5The default configuration of Oracle Application Server 9iAS 1.0.2.2 enables SOAP and allows anonymous users to deploy applications by defaul CVE-2001-13725.0Oracle 9i Application Server 1.0.2 allows remote attackers to obtain the physical path of a file under the server root via a request for a n CVE-2001-13735.0MailSafe in Zone Labs ZoneAlarm 2.6 and earlier and ZoneAlarm Pro 2.6 and 2.4 does not block prohibited file types with long file names, whi CVE-2001-13747.2expect before 5.32 searches for its libraries in /var/tmp before other directories, which could allow local users to gain root privileges vi CVE-2001-13754.6tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local u CVE-2001-13767.5Buffer overflow in digest calculation function of multiple RADIUS implementations allows remote attackers to cause a denial of service and p CVE-2001-13775.0Multiple RADIUS implementations do not properly validate the Vendor-Length of the Vendor-Specific attribute, which allows remote attackers t CVE-2001-13782.1fetchmailconf in fetchmail before 5.7.4 allows local users to overwrite files of other users via a symlink attack on temporary files.CVE-2001-13797.5The PostgreSQL authentication modules (1) mod_auth_pgsql 0.9.5, and (2) mod_auth_pgsql_sys 0.9.4, allow remote attackers to bypass authentic