← Database

CVE-2002-1841

MEDIUM CVSS: 5.0 Published: 2002-12-31 Modified: 2026-06-16

Description

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.

Affected Platforms

Noguska Nola

Weakness Type

CWE-434

References