CVE-2002-1841 in Nola

Zusammenfassung

von MITRE

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservieren: 29.06.2005
• Veröffentlichung: 31.12.2002
• Moderieren: akzeptiert
• Eintrag: VDB-19484
• CPE: bereit
• CWE: CWE-269 (bestätigt)
• CVSS: 5.0 (NVD)
• EPSS: 0.02157
• KEV: nein
• Aktivitäten: very low

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1841
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1841
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1841/