CVE-2002-1841
N/A
N/A
Summary
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://marc.info/?l=vuln-dev&m=102511114021370&w=2
- http://marc.info/?l=vuln-dev&m=102520790718208&w=2
- http://online.securityfocus.com/archive/1/280340
- http://www.iss.net/security_center/static/9438.php
- http://www.securityfocus.com/bid/5116
References
- http://marc.info/?l=vuln-dev&m=102511114021370&w=2
- http://marc.info/?l=vuln-dev&m=102520790718208&w=2
- http://online.securityfocus.com/archive/1/280340
- http://www.iss.net/security_center/static/9438.php
- http://www.securityfocus.com/bid/5116
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.