CVE-2001-1235

Published: Oct 2, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.

Affected (1)

Products: Derek Leung: Pslash

Derek Leung

1 product

Pslash

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Derek Leung Pslash	Version 0.70

References (8)

http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html

Source: cve@mitre.org

http://www.iss.net/security_center/static/7215.php

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/847803

Source: cve@mitre.org

ExploitPatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/3395

Source: cve@mitre.org

Vendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/7215.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.kb.cert.org/vuls/id/847803

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitPatchThird Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/3395

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.