← Database

CVE-2001-1049

HIGH CVSS: 7.5 Published: 2001-10-02 Modified: 2026-06-16

Description

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Affected Platforms

Paul M. Jones Phorecast

Weakness Type

NVD-CWE-Other

References