Vulnerability in Dark Hart Portal Darkportal-Unix

CVE-2001-1051

Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

EPSS: 0.018 (76.1th percentile) — read the EPSS interpretation.

Affected products

Dark_hart_portal Darkportal-unix — versions 0.1.16, 0.1.17, 0.1.18
N/a — versions n/a

References

cve@mitre.org (Vendor Advisory, mailing-list, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)