VULNERABILITY INTELLIGENCE

CVE-2002-1841

CVSS score5 MEDIUM

EPSS probability2.14%

CISA KEVNot currently listed

Published2002-12-31

Last modified2026-06-16

Description

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.