Lucene search
MitreCVE-2002-1841HistoryJun 28, 2005 - 4:00 a.m.
CVE-2002-1841
2005-06-2804:00:00
CWE-434
mitre
web.nvd.nist.gov
30
nola
document management
cve-2002-1841
file upload
security vulnerability
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.8
Confidence
Low
EPSS
0.004
Percentile
72.9%
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
Affected configurations
Node
noguskanolaMatch1.1.1
ORnoguskanolaMatch1.1.2
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.8
Confidence
Low
EPSS
0.004
Percentile
72.9%
Related for CVE-2002-1841