CVE-2001-1370
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
Scoring
- CVSS base score
- 1.5
- EPSS probability
- 30.07%
- Published
- 2003-04-02
- Last modified
- 2026-03-16
Affected products
- n/a n/a