CVE-2001-1051

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2001-10-02 · updated 2026-06-16

Description

Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Affected products

Dark Hart Portal Darkportal-Unix: 0.1.16, 0.1.17, 0.1.18

References

http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html
http://sourceforge.net/tracker/index.php?func=detail&aid=440666&group_id=20971&atid=120971
http://www.securityfocus.com/bid/3390
https://exchange.xforce.ibmcloud.com/vulnerabilities/7215
http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html
http://sourceforge.net/tracker/index.php?func=detail&aid=440666&group_id=20971&atid=120971
http://www.securityfocus.com/bid/3390
https://exchange.xforce.ibmcloud.com/vulnerabilities/7215

Get alerted when CVE-2001-1051 or the next vulnerability affects your stack