Unrated severityNVD Advisory· Published Oct 2, 2001· Updated Jun 16, 2026

CVE-2001-1299

Description

Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Zorbat/Zorbstats2 versions
cpe:2.3:a:zorbat:zorbstats:0.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:zorbat:zorbstats:0.8:*:*:*:*:*:*:*
- (no CPE)range: < 0.9

Patches

Vulnerability mechanics

References

www.iss.net/security_center/static/7215.phpnvdPatchVendor Advisory
www.securityfocus.com/bid/3386nvdVendor Advisory
www.kb.cert.org/vuls/id/847803nvdUS Government Resource
www.kb.cert.org/vuls/id/JARL-53RJKVnvdUS Government Resource
archives.neohapsis.com/archives/bugtraq/2001-10/0012.htmlnvd
www.come.to/zorbat/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000