← Database

CVE-2001-0437

MEDIUM CVSS: 5.0 Published: 2001-07-02 Modified: 2026-06-16

Description

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.

Affected Platforms

Dcscripts DcforumDcscripts Dcforum 2000

Weakness Type

NVD-CWE-Other

References