CVE-2002-1841
Published Dec 31, 2002
Last updated 10 months ago
Overview
- Description
- The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-434
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:noguska:nola:1.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BE434C5B-9280-4B51-9A65-BAD2AF3759BD"
},
{
"criteria": "cpe:2.3:a:noguska:nola:1.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19990936-0711-4E89-A169-EA039000E313"
}
],
"operator": "OR"
}
]
}
]