← Database

CVE-2001-1237

HIGH CVSS: 7.5 Published: 2001-10-02 Modified: 2026-06-16

Description

Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.

Affected Platforms

Peaceworks Computer Consulting Phormation

Weakness Type

NVD-CWE-Other

References