CVE-2001-1334: Phpslash

Medium severity, CVSS 5.0. EPSS: 3.1% chance of exploitation in the next 30 days.

Block_render_url.class in PHPSlash 0.6.1 allows remote attackers with PHPSlash administrator privileges to read arbitrary files by creating a block and specifying the target file as the source URL.

Affected products

• Phpslash Phpslash: version 0.5.3.2 only; version 0.6.1 only

Published 2002-05-19. Last modified 2026-06-16.