CVE-2001-0043

CVE-2001-0043 is a critical vulnerability affecting phpGroupWare versions prior to 0.9.7, allowing remote attackers to execute arbitrary PHP commands. This is achieved by manipulating the phpgw_info parameter in phpgw.inc.php to include a malicious file. With a CVSS score of 10.0 (HIGH), it presents a severe risk due to its network-based attack vector, low complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion, indicating awareness among security researchers.