CVE-2001-1370
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote...
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
Exploit likelihood
What each source reports
NVD Score used
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
- Record
CVE-2001-1370- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
- Record
CVE-2001-1370- Updated
- 2026-11-02
EUVDEUVD-2001-1351 No score
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
- Record
EUVD-2001-1351- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qxgr-53mq-mh3m No score
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote...
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
- Record
GHSA-qxgr-53mq-mh3m- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHPLib Team PHPLIB 7.2 - Remote Script Execution | 2001-07-21 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1370 is a high vulnerability (CVSS 10.0) in Phplib Team Phplib, published July 21, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 17.2%, the 97th percentile. No source names a fixed version.
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000410
debian.org/security/2001/dsa-073
online.securityfocus.com/archive/1/198495
iss.net/security_center/static/6892.php
securityfocus.com/archive/1/198768
marc.info?l=bugtraq&m=99616122712122&w=2
nvd.nist.gov/vuln/detail/CVE-2001-1370
github.com/advisories/GHSA-qxgr-53mq-mh3m