CVE-2001-1471

HighCVSS 8.8/10Last modified Jun 16, 2026

Description

prefs.php in phpBB 1.4.0 and earlier allows remote authenticated users to execute arbitrary PHP code via an invalid language value, which prevents the variables (1) $l_statsblock in prefs.php or (2) $l_privnotify in auth.php from being properly initialized, which can be modified by the user and later used in an eval statement.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-665

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.htmlBroken Link
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.htmlBroken Link
http://www.kb.cert.org/vuls/id/920931Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/3167Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6944Third Party Advisory, VDB Entry
http://archives.neohapsis.com/archives/bugtraq/2001-08/0123.htmlBroken Link
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-08/0087.htmlBroken Link
http://www.kb.cert.org/vuls/id/920931Third Party Advisory, US Government Resource
http://www.securityfocus.com/bid/3167Broken Link, Exploit, Patch, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6944Third Party Advisory, VDB Entry

Timeline

Published: Jul 31, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-14724.6SQL injection vulnerability in prefs.php in phpBB 1.4.0 and 1.4.1 allows remote authenticated users to execute arbitrary SQL commands and ga CVE-2001-14737.5The SSH-1 protocol allows remote servers to conduct man-in-the-middle attacks and replay a client challenge response to a target server by c CVE-2001-14745.0SSH before 2.0 disables host key checking when connecting to the localhost, which allows remote attackers to silently redirect connections t CVE-2001-14757.5SSH before 2.0, when using RC4 and password authentication, allows remote attackers to replay messages until a new server key (VK) is genera CVE-2001-14767.5SSH before 2.0, with RC4 encryption and the "disallow NULL passwords" option enabled, makes it easier for remote attackers to guess portions CVE-2001-14774.6The Domain gateway in BEA Tuxedo 7.1 does not perform authorization checks for imported services and qspaces on remote domains, even when an CVE-2001-14787.2Buffer overflow in xlock in UnixWare 7.1.0 and 7.1.1 and Open Unix 8.0.0 allows local users to execute arbitrary code.CVE-2001-14792.1smcboot in Sun SMC (Sun Management Center) 2.0 in Solaris 8 allows local users to delete arbitrary files via a symlink attack on /tmp/smc$SM CVE-2001-14807.5Java Runtime Environment (JRE) and SDK 1.2 through 1.3.0_04 allows untrusted applets to access the system clipboard.CVE-2001-14819.8Xitami 2.4 through 2.5 b4 stores the Administrator password in plaintext in the default.aut file, whose default permissions are world-readab CVE-2001-14827.5SQL injection vulnerability in bb_memberlist.php for phpBB 1.4.2 allows remote attackers to execute arbitrary SQL queries via the $sortby va CVE-2001-14835.0One-Time Passwords In Everything (a.k.a OPIE) 2.32 and 2.4 allows remote attackers to determine the existence of user accounts by printing r