CVE-2002-1841

Noguska Nola - Unrestricted File Upload

Title source: rule

Description

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.

Scores

EPSS 0.0072
EPSS Percentile 72.2%

Classification

CWE
CWE-434
Status draft

Affected Products (2)

noguska/nola
noguska/nola

Timeline

Published Dec 31, 2002
Tracked Since Feb 18, 2026