CVEvulnerability
CVE-2001-1367
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-07-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The checkAccess function in PHPSlice 0.1.4, and all other versions between 0.1.1 and 0.1.6, does not properly verify the administrative access level, which could allow remote attackers to gain privileges.
Affected configurations
• phpslice phpslice (<= 0.1.6)
References
- http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html Vendor Advisory
- http://phpslice.org/comments.php?aid=1031& URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9649 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/vulnwatch/2001-q3/0005.html Vendor Advisory
- http://phpslice.org/comments.php?aid=1031& URL Repurposed
- https://exchange.xforce.ibmcloud.com/vulnerabilities/9649 exchange.xforce.ibmcloud.com