← CVECheck
HomeVulnerabilities

CVE-2001-1048 — HIGH severity vulnerability (AWOL PHP script allows remote attackers to include arbitrary)

AWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.

CVE IDCVE-2001-1048
SeverityHIGH
CVSS score7.5
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
CWENVD-CWE-Other
StatusModified
Published2001-10-02
Last modified2026-04-16
DescriptionAWOL PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
SourceNIST National Vulnerability Database

🔍 Search all vulnerabilities →