CVE-2001-1299

Affected software: Zorbat Zorbstats PHP script prior to 0.9. The issue is remote file inclusion via an HTTP request that sets the includedir variable, enabling attackers to include arbitrary files from remote sites. Root cause appears to be insufficient validation of includedir. Impact per source...