Unscored CVE-2002-1038 EUVD-2002-1027GHSA-vpxr-gggm-p35f

Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain …

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features.

References

dcl-file-upload(9742) vdb-entry
http://dcl.sourceforge.net/index.php
20020714 [VulnWatch] Double Choco Latte multiple vulnerabilities mailing-list
20020714 Double Choco Latte multiple vulnerabilities mailing-list