CVE-2001-1051

critical

Description

Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/7215

http://www.securityfocus.com/bid/3390

http://archives.neohapsis.com/archives/bugtraq/2001-10/0012.html

Details

Source: Mitre, NVD

Published: 2001-10-02

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.01048

Detections

Analytics