Arbitrary File Inclusion Vulnerability in Webodex PHP Script 1.0 and Earlier

Arbitrary File Inclusion Vulnerability in Webodex PHP Script 1.0 and Earlier

CVE-2001-1298 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:N

Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Learn more about our Web Application Penetration Testing UK.