medium5.0
CVE-2002-1841
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and exec…
Impact
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Noguska | Nola | Versions 1.1.1, 1.1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://marc.info/?l=vuln-dev&m=102511114021370&w=2
- http://marc.info/?l=vuln-dev&m=102520790718208&w=2
- http://online.securityfocus.com/archive/1/280340
- http://www.iss.net/security_center/static/9438.php
- http://www.securityfocus.com/bid/5116
- http://marc.info/?l=vuln-dev&m=102511114021370&w=2
- http://marc.info/?l=vuln-dev&m=102520790718208&w=2
- http://online.securityfocus.com/archive/1/280340
- http://www.iss.net/security_center/static/9438.php
- http://www.securityfocus.com/bid/5116