CVE-2001-1334

CVE-2001-1334 describes an arbitrary file disclosure vulnerability in PHPSlash versions 0.6.1 and 0.5.3. An authenticated attacker with administrator privileges can exploit this by creating a block and specifying a local file path as the source URL, allowing them to read arbitrary files on the server. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a network attack vector and low complexity, leading to a potential impact of information disclosure. While not actively exploited in the wild, exploit code is publicly available on ExploitDB, though there is no evidence of Metasploit or Nuclei modules, and it lacks significant community discussion or media coverage.