PT-2002-2563 · Nola · Nola

Name of the Vulnerable Software and Affected Versions: NOLA versions 1.1.1 through 1.1.2 Description: The document management module does not restrict the types of files that are uploaded, allowing remote attackers to upload and execute arbitrary PHP files with extensions such as .php4...