Arbitrary file upload in Noguska Nola
CVE-2002-1841
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
Vulnerability class: Unrestricted File Upload
EPSS: 0.021 (80.1th percentile) — read the EPSS interpretation.
Affected products
- Noguska Nola — versions 1.1.1, 1.1.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, Mailing List, Third Party Advisory, x_refsource_VULN-DEV)
- cve@mitre.org (mailing-list, Mailing List, Third Party Advisory, x_refsource_VULN-DEV)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, VDB Entry, Third Party Advisory, Broken Link)
- cve@mitre.org (vdb-entry, Broken Link, x_refsource_XF)
- cve@mitre.org (Patch, VDB Entry, Third Party Advisory, vdb-entry, Broken Link, x_refsource_BID)