Unrated severityNVD Advisory· Published Jul 2, 2001· Updated Jun 16, 2026
CVE-2001-0437
CVE-2001-0437
Description
upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.
Affected products
8cpe:2.3:a:dcscripts:dcforum:1.0:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:dcscripts:dcforum:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:dcscripts:dcforum:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:dcscripts:dcforum_2000:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:dcscripts:dcforum:3.0:*:*:*:*:*:*:*
- cpe:2.3:a:dcscripts:dcforum:4.0:*:*:*:*:*:*:*
- cpe:2.3:a:dcscripts:dcforum:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:dcscripts:dcforum:6.0:*:*:*:*:*:*:*
- Range: = 1.0
Patches
Vulnerability mechanics
References
4- archives.neohapsis.com/archives/bugtraq/2001-04/0269.htmlnvdPatchVendor Advisory
- www.dcscripts.com/FAQ/sec_2001_03_31.htmlnvdPatchVendor Advisory
- www.securityfocus.com/bid/2611nvdPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/6393nvd
News mentions
0No linked articles in our index yet.