Vendor/product archive

dcscripts / dcforum_2000 CVEs

Beta · best-effort

3 CVEs tagged to dcscripts / dcforum_2000 — 1 Critical, 1 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to dcscripts vendor archive

CVE-2001-0527

Published Aug 14, 2001

DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration…

CVSS 10.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2001-0436

Published Jul 2, 2001

dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to ref…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2001-0437

Published Jul 2, 2001

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1