Unrated severityNVD Advisory· Published Oct 2, 2001· Updated Apr 16, 2026

CVE-2001-1049

Description

Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Affected products

Paul M. Jones/Phorecast
cpe:2.3:a:paul_m._jones:phorecast:*:*:*:*:*:*:*:*
Range: <=0.40

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

archives.neohapsis.com/archives/bugtraq/2001-10/0012.htmlnvdPatchVendor Advisory
www.securityfocus.com/bid/3388nvdVendor Advisory
phorecast.orgnvd
www.iss.net/security_center/static/7215.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000