CVE-2001-1020: Vibechild Directory Manager

High severity, CVSS 7.5. EPSS: 3.4% chance of exploitation in the next 30 days.

edit_image.php in Vibechild Directory Manager before 0.91 allows remote attackers to execute arbitrary commands via shell metacharacters in the userfile_name parameter, which is sent unfiltered to the PHP passthru function.

Affected products

• Vibechild Directory Manager: up to and including 0.91

Published 2001-09-05. Last modified 2026-06-16.