Unrated severityNVD Advisory· Published Oct 2, 2001· Updated Apr 16, 2026

CVE-2001-1299

Description

Zorbat Zorbstats PHP script before 0.9 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

Affected products

Zorbat/Zorbstats
cpe:2.3:a:zorbat:zorbstats:0.8:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.iss.net/security_center/static/7215.phpnvdPatchVendor Advisory
www.securityfocus.com/bid/3386nvdVendor Advisory
www.kb.cert.org/vuls/id/847803nvdUS Government Resource
www.kb.cert.org/vuls/id/JARL-53RJKVnvdUS Government Resource
archives.neohapsis.com/archives/bugtraq/2001-10/0012.htmlnvd
www.come.to/zorbat/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000