CVE-2002-1841

Опубликовано: 31 дек. 2002

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.

Ссылки

http://marc.info/?l=vuln-dev&m=102511114021370&w=2
Mailing List
Third Party Advisory
http://marc.info/?l=vuln-dev&m=102520790718208&w=2
Mailing List
Third Party Advisory
http://online.securityfocus.com/archive/1/280340
Broken Link
Third Party Advisory
VDB Entry
http://www.iss.net/security_center/static/9438.php
Broken Link
http://www.securityfocus.com/bid/5116
Broken Link
Patch
Third Party Advisory
VDB Entry
http://marc.info/?l=vuln-dev&m=102511114021370&w=2
Mailing List
Third Party Advisory
http://marc.info/?l=vuln-dev&m=102520790718208&w=2
Mailing List
Third Party Advisory
http://online.securityfocus.com/archive/1/280340
Broken Link
Third Party Advisory
VDB Entry
http://www.iss.net/security_center/static/9438.php
Broken Link
http://www.securityfocus.com/bid/5116
Broken Link
Patch
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:noguska:nola:1.1.1:*:*:*:*:*:*:*

cpe:2.3:a:noguska:nola:1.1.2:*:*:*:*:*:*:*

EPSS

Процентиль: 72%

0.00721

Низкий

5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-7xcv-cvmj-qpgr

github

почти 4 года назад