Lucene search
HistoryDec 31, 2002 - 5:00 a.m.
CVE-2002-1841
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.5
Confidence
High
EPSS
0.004
Percentile
72.9%
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
Affected configurations
Node
noguskanolaMatch1.1.1
ORnoguskanolaMatch1.1.2
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
7.5
Confidence
High
EPSS
0.004
Percentile
72.9%
Related for NVD:CVE-2002-1841