Unscored CVE-2001-0437 EUVD-2001-0434GHSA-pcp2-j956-2xvp

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to …

Published May 24, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.

References

dcforum-az-file-upload(6393) vdb-entry
http://www.dcscripts.com/FAQ/sec_2001_03_31.html
2611 vdb-entry
20010416 qDefense Advisory: DCForum allows remote read/write/execute mailing-list