Vulnerability in Derek Leung Pslash

CVE-2001-1235

pSlash PHP script 0.7 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.

EPSS: 0.046 (90.6th percentile) — read the EPSS interpretation.

Affected products

Derek_leung Pslash — versions 0.70
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (US Government Resource, x_refsource_CERT-VN, Exploit, Patch, Third Party Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)