critical10.0Public exploit code
CVE-2001-0527
DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- DCForum 6.0 - Remote Admin Privilege Arbitrary Commands2001-05-08 · remote · cgi · Verified
Impact
DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dcscripts | Dcforum | Version 6.0 |
| Dcscripts | Dcforum 2000 | Version 1.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0122.html
- http://www.dcscripts.com/dcforum/dcfNews/167.html
- http://www.osvdb.org/480
- http://www.securityfocus.com/bid/2728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6538
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0122.html
- http://www.dcscripts.com/dcforum/dcfNews/167.html
- http://www.osvdb.org/480
- http://www.securityfocus.com/bid/2728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6538