CVE-2002-1841

N/A Unknown

Published: December 31, 2002 Modified: April 16, 2026

Description

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://marc.info/?l=vuln-dev&m=102511114021370&w=2

Source: cve@mitre.org

Mailing List Third Party Advisory

http://marc.info/?l=vuln-dev&m=102520790718208&w=2

Source: cve@mitre.org

Mailing List Third Party Advisory

http://online.securityfocus.com/archive/1/280340

Source: cve@mitre.org

Broken Link Third Party Advisory VDB Entry

http://www.iss.net/security_center/static/9438.php

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/5116

Source: cve@mitre.org

Broken Link Patch Third Party Advisory VDB Entry

http://marc.info/?l=vuln-dev&m=102511114021370&w=2