CVE-2001-1370

None

CVSS

—

EPSS

17.2%

Published

Jul 21, 2001

CISA due date

—

The record

prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.

Affected packages

Ecosystem	Package	Introduced	Fixed