CVE-2001-1370 prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malici...
HighCVSS 10.0
EPSS 17.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| phplib team phplib | = 7.2 | No fix listed |
| phplib team phplib | = 7.2.1 | No fix listed |
| phplib team phplib | = 7.2b | No fix listed |
| phplib team phplib | = 7.2c | No fix listed |
References
- CLA-2001:410 vendor-advisory
- 20010726 TSLSA-2001-0014 - PHPLib mailing-list
- 20010721 IMP 2.2.6 (SECURITY) released mailing-list
- DSA-073 patch vendor-advisory
- phplib-script-execution(6892) vdb-entry vendor-advisory
- 20010722 [SEC] Hole in PHPLib 7.2 prepend.php3 mailing-list vendor-advisory
- 3079 exploit patch vdb-entry vendor-advisory