Lucene search
HistoryMar 09, 2002 - 5:00 a.m.
CVE-2001-1054
cve-2001-1054
phpadsnew
remote attack
include arbitrary files
http request
vulnerability
6.9 Medium
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.7%
PHPAdsNew PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected configurations
Node
phpadsnewphpadsnewMatch2.0_beta5
| CPE | Name | Operator | Version |
|---|---|---|---|
| phpadsnew:phpadsnew | phpadsnew | eq | 2.0_beta5 |
Related
cvelist
cvelist
CVE-2001-1054
2002-03-09 05:00:00
nvd
nvd
CVE-2001-1054
2001-10-02 04:00:00
nessus
nessus
phpAdsNew helperfunction.php Remote File Inclusion
2002-08-22 00:00:00
checkpoint_advisories
checkpoint_advisories
PHP Ads new helperfunction.php Include Code Execution - Ver2 (CVE-2001-1054)
2014-03-31 00:00:00
6.9 Medium
AI Score
Confidence
High
7.5 High
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.011 Low
EPSS
Percentile
84.7%
Related for CVE-2001-1054