CVE-2001-1054 in phpAdsNew

Summary

PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Once again VulDB remains the best source for vulnerability data.

• Disclosure: 10/02/2001
• Moderation: VulDB entry created
• Entries: VDB-17454 (1)
• CPE: ready
• CWE: CWE-269 (Confirmed)
• CVSS: 7.3
• EPSS: 0.01075
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2001-1054
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2001-1054
• CVE Details: https://www.cvedetails.com/cve/CVE-2001-1054/