VDB

GCVE-110-CERTCC-2001-847803

GCVE-110-CERTCC-2001-847803
Advisory Published
Vulnetix · Advisory published July 25, 2001
Php is a dynamic scripting language used by programmers to develop webservers, message boards, chat applications and a variety of programs. By default php stores variables passed from the URL in a global context. Programmers often fail to change this setting which can allow serious vulnerabilities to surface. Often intruders can exploit the vulnerabilities created by this failure to gain administrative rights to the application or server, manipulate data, and execute arbitrary php code.
Download JSON Open in Console

Risk Scores

certcc-cam
certcc-cam
impact19population3exploitation11widely_known20score_current17.5275ease_of_exploitation20

References

Php variables passed from the browser are stored in global context
advisory
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url
Php variables passed from the browser are stored in global context
url

Browse GCVE Records

72,337 records in the GCVE database · Updated July 14, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON
$ Console Community · 100/wk Open console ›