CVE-2001-0437

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file

published May 24, 2001

CVSS
—
EPSS
2%
Percentile
77.1
In the wild
Unconfirmed
What it is

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01720 · 77.1th percentile
Published
2001-05-24T04:00Z
EPSS history
Timeline
  • 24 MAY 04:00Z
    upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file
    cvelistv5