CVE-2002-0430

This exploit targets CVE-2002-0430 in Cobalt RaQ's 'MultiFileUpload.php' script, which lacks authentication. It allows file uploads with predictable filenames in '/tmp', enabling local attackers to overwrite files via symlinks, potentially leading to privilege escalation.

This exploit targets an authentication bypass in Cobalt RaQ's 'MultiFileUpload.php' script, allowing unauthenticated file uploads. The PoC generates predictable filenames for a race condition attack, potentially leading to local privilege escalation or DoS.