CVE-2001-1357
UnknownEPSS 1.14%
Last modified
CVE-2001-1357 is a vulnerability of currently unknown severity. Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables.. EPSS estimates a 1.14% chance of exploitation in the next 30 days.
Description
Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Phpheaven | Phpmychat | <= 0.14.5 |
References
- http://www.phpheaven.net/projects/phpMyChat/changes.php3Vendor Advisory
- http://www.phpheaven.net/projects/phpMyChat/changes.php3Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2001-1357?
Multiple vulnerabilities in phpMyChat before 0.14.5 exist in (1) input.php3, (2) handle_inputH.php3, or (3) index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables.
How severe is CVE-2001-1357?
Severity scoring for CVE-2001-1357 is pending analysis. The EPSS model estimates a 1.14% probability of exploitation in the next 30 days.
How do I fix CVE-2001-1357?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2001
- CVE-2001-1351Cross-site scripting vulnerability in Namazu 2.0.8 and earli…
- CVE-2001-1352Cross-site scripting vulnerability in Namazu 2.0.9 and earli…
- CVE-2001-1353ghostscript before 6.51 allows local users to read and write…
- CVE-2001-1354NetWin Authentication module (NWAuth) 2.0 and 3.0b, as imple…
- CVE-2001-1355Buffer overflows in NetWin Authentication Module (NWAuth) 3.…
- CVE-2001-1356NetWin SurgeFTP 2.0f and earlier encrypts passwords using we…
- CVE-2001-1358Vulnerabilities in phpMyChat before 0.14.4 allow local and p…
- CVE-2001-1359Volution clients 1.0.7 and earlier attempt to contact the co…
- CVE-2001-1360Vulnerability in Scanner Access Now Easy (SANE) before 1.0.5…
- CVE-2001-1361Vulnerability in The Web Information Gateway (TWIG) 2.7.1, p…
- CVE-2001-1362Vulnerability in the server for nPULSE before 0.53p4.
- CVE-2001-1363Vulnerability in phpWebSite before 0.7.9 related to running …
Are you affected by CVE-2001-1357?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST