CVE

Id
6223  
CVE No.
CVE-2002-1841  
Status
Candidate  
Description
The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.  
Phase
Assigned (20050629)  
Votes
None (candidate not yet proposed)  
Comments