CVE-2000-1166 | BDVDB-2026-4239 Detail

Description#

Twig webmail system does not properly set the "vhosts" variable if it is not configured on the site, which allows remote attackers to insert arbitrary PHP (PHP3) code by specifying an alternate vhosts as an argument to the index.php3 program.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://twig.screwdriver.net/file.php3?file=CHANGELOG
http://www.securityfocus.com/bid/1998
http://archives.neohapsis.com/archives/bugtraq/2000-11/0351.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/5581

Exploit#

No public exploit known

History#

Version 12002-06-25Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.