CVE-2001-1237

Published: Oct 2, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.

Affected (1)

Products: Peaceworks Computer Consulting: Phormation

Peaceworks Computer Consulting

1 product

Phormation

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Peaceworks Computer Consulting Phormation	version ≤ 0.9.1

References (10)

http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html

Source: cve@mitre.org

http://www.iss.net/security_center/static/7215.php

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/847803

Source: cve@mitre.org

US Government Resource

http://www.peaceworks.ca/phormation/phormation-0.9.2.tar.gz

Source: cve@mitre.org

http://www.securityfocus.com/bid/3393

Source: cve@mitre.org

ExploitPatchVendor Advisory

http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html