Search
Find a vulnerability
Search criteria
2 vulnerabilities by noguska
CVE-2002-1841 (GCVE-0-2002-1841)
Vulnerability from cvelistv5 – Published: 2005-06-28 04:00 – Updated: 2024-08-08 03:43
VLAI
EPSS
VEX
Summary
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://marc.info/?l=vuln-dev&m=102511114021370&w=2 | mailing-listx_refsource_VULN-DEV |
| http://marc.info/?l=vuln-dev&m=102520790718208&w=2 | mailing-listx_refsource_VULN-DEV |
| http://online.securityfocus.com/archive/1/280340 | mailing-listx_refsource_BUGTRAQ |
| http://www.iss.net/security_center/static/9438.php | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/5116 | vdb-entryx_refsource_BID |
Date Public
2002-06-25 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T03:43:33.477Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_VULN-DEV",
"x_transferred"
],
"url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
},
{
"name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_VULN-DEV",
"x_transferred"
],
"url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
},
{
"name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://online.securityfocus.com/archive/1/280340"
},
{
"name": "nola-php-script-upload(9438)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "http://www.iss.net/security_center/static/9438.php"
},
{
"name": "5116",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/5116"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2002-06-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_VULN-DEV"
],
"url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
},
{
"name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_VULN-DEV"
],
"url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
},
{
"name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://online.securityfocus.com/archive/1/280340"
},
{
"name": "nola-php-script-upload(9438)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "http://www.iss.net/security_center/static/9438.php"
},
{
"name": "5116",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/5116"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-1841",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"refsource": "VULN-DEV",
"url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
},
{
"name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"refsource": "VULN-DEV",
"url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
},
{
"name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"refsource": "BUGTRAQ",
"url": "http://online.securityfocus.com/archive/1/280340"
},
{
"name": "nola-php-script-upload(9438)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/9438.php"
},
{
"name": "5116",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/5116"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2002-1841",
"datePublished": "2005-06-28T04:00:00.000Z",
"dateReserved": "2005-06-29T00:00:00.000Z",
"dateUpdated": "2024-08-08T03:43:33.477Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
CVE-2002-1841 (GCVE-0-2002-1841)
Vulnerability from nvd – Published: 2005-06-28 04:00 – Updated: 2024-08-08 03:43
VLAI
EPSS
VEX
Summary
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
5 references
| URL | Tags |
|---|---|
| http://marc.info/?l=vuln-dev&m=102511114021370&w=2 | mailing-listx_refsource_VULN-DEV |
| http://marc.info/?l=vuln-dev&m=102520790718208&w=2 | mailing-listx_refsource_VULN-DEV |
| http://online.securityfocus.com/archive/1/280340 | mailing-listx_refsource_BUGTRAQ |
| http://www.iss.net/security_center/static/9438.php | vdb-entryx_refsource_XF |
| http://www.securityfocus.com/bid/5116 | vdb-entryx_refsource_BID |
Date Public
2002-06-25 00:00
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-08T03:43:33.477Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_VULN-DEV",
"x_transferred"
],
"url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
},
{
"name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_VULN-DEV",
"x_transferred"
],
"url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
},
{
"name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ",
"x_transferred"
],
"url": "http://online.securityfocus.com/archive/1/280340"
},
{
"name": "nola-php-script-upload(9438)",
"tags": [
"vdb-entry",
"x_refsource_XF",
"x_transferred"
],
"url": "http://www.iss.net/security_center/static/9438.php"
},
{
"name": "5116",
"tags": [
"vdb-entry",
"x_refsource_BID",
"x_transferred"
],
"url": "http://www.securityfocus.com/bid/5116"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"datePublic": "2002-06-25T00:00:00.000Z",
"descriptions": [
{
"lang": "en",
"value": "The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2016-10-17T13:57:01.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_VULN-DEV"
],
"url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
},
{
"name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_VULN-DEV"
],
"url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
},
{
"name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"tags": [
"mailing-list",
"x_refsource_BUGTRAQ"
],
"url": "http://online.securityfocus.com/archive/1/280340"
},
{
"name": "nola-php-script-upload(9438)",
"tags": [
"vdb-entry",
"x_refsource_XF"
],
"url": "http://www.iss.net/security_center/static/9438.php"
},
{
"name": "5116",
"tags": [
"vdb-entry",
"x_refsource_BID"
],
"url": "http://www.securityfocus.com/bid/5116"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2002-1841",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"refsource": "VULN-DEV",
"url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
},
{
"name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"refsource": "VULN-DEV",
"url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
},
{
"name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
"refsource": "BUGTRAQ",
"url": "http://online.securityfocus.com/archive/1/280340"
},
{
"name": "nola-php-script-upload(9438)",
"refsource": "XF",
"url": "http://www.iss.net/security_center/static/9438.php"
},
{
"name": "5116",
"refsource": "BID",
"url": "http://www.securityfocus.com/bid/5116"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2002-1841",
"datePublished": "2005-06-28T04:00:00.000Z",
"dateReserved": "2005-06-29T00:00:00.000Z",
"dateUpdated": "2024-08-08T03:43:33.477Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}