CVE-2001-1370
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote...
CVE-2001-1370 is a high vulnerability (CVSS 10.0) in Phplib Team Phplib, published July 21, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 17.2%, the 97th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 17.2%EPSS, 97th percentile
- Exploitation
- None known1 public exploit
- Fixed in
- No fix listedNo source names one
Description
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
Exploit likelihood
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | PHPLib Team PHPLIB 7.2 - Remote Script Execution | 2001-07-21 |
What each source reports
NVD Score used
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
- Record
CVE-2001-1370- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE ListNo score
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
- Record
CVE-2001-1370- Updated
- 2026-11-02
EUVDEUVD-2001-1351No score
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
- Record
EUVD-2001-1351- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qxgr-53mq-mh3mNo score
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote...
prepend.php3 in PHPLib before 7.2d, when register_globals is enabled for PHP, allows remote attackers to execute arbitrary scripts via an HTTP request that modifies $_PHPLIB[libdir] to point to malicious code on another server, as seen in Horde 1.2.5 and earlier, IMP before 2.2.6, and other packages that use PHPLib.
- Record
GHSA-qxgr-53mq-mh3m- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
distro.conectiva.com.br/atualizacoes?id=a&anuncio=000410
debian.org/security/2001/dsa-073
online.securityfocus.com/archive/1/198495
iss.net/security_center/static/6892.php
securityfocus.com/archive/1/198768
marc.info?l=bugtraq&m=99616122712122&w=2
nvd.nist.gov/vuln/detail/CVE-2001-1370
github.com/advisories/GHSA-qxgr-53mq-mh3m