| Max CVSS | 7.5 | Min CVSS | 5.0 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2001-0437 | 5.0 |
upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.
|
19-12-2017 - 02:29 | 02-07-2001 - 04:00 | |
| CVE-2001-0436 | 7.5 |
dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.
|
19-12-2017 - 02:29 | 02-07-2001 - 04:00 |