CVE-2001-1370

Опубликовано: 21 июл. 2001

Источник: nvd

CVSS2: 10

EPSS Средний

Описание

prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.

Ссылки

ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-027.0.txt
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
http://marc.info/?l=bugtraq&m=99616122712122&w=2
http://online.securityfocus.com/archive/1/198495
http://www.debian.org/security/2001/dsa-073
Patch
Vendor Advisory
http://www.iss.net/security_center/static/6892.php
Vendor Advisory
http://www.securityfocus.com/archive/1/198768
Vendor Advisory
http://www.securityfocus.com/bid/3079
Exploit
Patch
Vendor Advisory
ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2001-027.0.txt
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000410
http://marc.info/?l=bugtraq&m=99616122712122&w=2
http://online.securityfocus.com/archive/1/198495
http://www.debian.org/security/2001/dsa-073
Patch
Vendor Advisory
http://www.iss.net/security_center/static/6892.php
Vendor Advisory
http://www.securityfocus.com/archive/1/198768
Vendor Advisory
http://www.securityfocus.com/bid/3079
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:phplib_team:phplib:7.2:*:*:*:*:*:*:*

cpe:2.3:a:phplib_team:phplib:7.2.1:*:*:*:*:*:*:*

cpe:2.3:a:phplib_team:phplib:7.2b:*:*:*:*:*:*:*

cpe:2.3:a:phplib_team:phplib:7.2c:*:*:*:*:*:*:*

EPSS

Процентиль: 96%

0.30068

Средний

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-qxgr-53mq-mh3m

github

больше 3 лет назад