Search

Find a vulnerability

Search criteria ⓘ Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    2 vulnerabilities by noguska

    CVE-2002-1841 (GCVE-0-2002-1841)

    Vulnerability from cvelistv5 – Published: 2005-06-28 04:00 – Updated: 2024-08-08 03:43
    VLAI
    Summary
    The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://marc.info/?l=vuln-dev&m=102511114021370&w=2 mailing-listx_refsource_VULN-DEV
    http://marc.info/?l=vuln-dev&m=102520790718208&w=2 mailing-listx_refsource_VULN-DEV
    http://online.securityfocus.com/archive/1/280340 mailing-listx_refsource_BUGTRAQ
    http://www.iss.net/security_center/static/9438.php vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/5116 vdb-entryx_refsource_BID
    Date Public
    2002-06-25 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:43:33.477Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
            "tags": [
              "mailing-list",
              "x_refsource_VULN-DEV",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
          },
          {
            "name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
            "tags": [
              "mailing-list",
              "x_refsource_VULN-DEV",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
          },
          {
            "name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://online.securityfocus.com/archive/1/280340"
          },
          {
            "name": "nola-php-script-upload(9438)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/9438.php"
          },
          {
            "name": "5116",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/5116"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-06-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
          "tags": [
            "mailing-list",
            "x_refsource_VULN-DEV"
          ],
          "url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
        },
        {
          "name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
          "tags": [
            "mailing-list",
            "x_refsource_VULN-DEV"
          ],
          "url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
        },
        {
          "name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://online.securityfocus.com/archive/1/280340"
        },
        {
          "name": "nola-php-script-upload(9438)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/9438.php"
        },
        {
          "name": "5116",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/5116"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1841",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
              "refsource": "VULN-DEV",
              "url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
            },
            {
              "name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
              "refsource": "VULN-DEV",
              "url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
            },
            {
              "name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
              "refsource": "BUGTRAQ",
              "url": "http://online.securityfocus.com/archive/1/280340"
            },
            {
              "name": "nola-php-script-upload(9438)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/9438.php"
            },
            {
              "name": "5116",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/5116"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1841",
    "datePublished": "2005-06-28T04:00:00.000Z",
    "dateReserved": "2005-06-29T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:43:33.477Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

    CVE-2002-1841 (GCVE-0-2002-1841)

    Vulnerability from nvd – Published: 2005-06-28 04:00 – Updated: 2024-08-08 03:43
    VLAI
    Summary
    The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.
    Severity
    No CVSS data available.
    CWE
    • n/a
    Assigner
    References
    URL Tags
    http://marc.info/?l=vuln-dev&m=102511114021370&w=2 mailing-listx_refsource_VULN-DEV
    http://marc.info/?l=vuln-dev&m=102520790718208&w=2 mailing-listx_refsource_VULN-DEV
    http://online.securityfocus.com/archive/1/280340 mailing-listx_refsource_BUGTRAQ
    http://www.iss.net/security_center/static/9438.php vdb-entryx_refsource_XF
    http://www.securityfocus.com/bid/5116 vdb-entryx_refsource_BID
    Date Public
    2002-06-25 00:00
    Show details on NVD website
    To clipboard 

    {
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-08T03:43:33.477Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
            "tags": [
              "mailing-list",
              "x_refsource_VULN-DEV",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
          },
          {
            "name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
            "tags": [
              "mailing-list",
              "x_refsource_VULN-DEV",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
          },
          {
            "name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://online.securityfocus.com/archive/1/280340"
          },
          {
            "name": "nola-php-script-upload(9438)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "http://www.iss.net/security_center/static/9438.php"
          },
          {
            "name": "5116",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/5116"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2002-06-25T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
          "tags": [
            "mailing-list",
            "x_refsource_VULN-DEV"
          ],
          "url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
        },
        {
          "name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
          "tags": [
            "mailing-list",
            "x_refsource_VULN-DEV"
          ],
          "url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
        },
        {
          "name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://online.securityfocus.com/archive/1/280340"
        },
        {
          "name": "nola-php-script-upload(9438)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "http://www.iss.net/security_center/static/9438.php"
        },
        {
          "name": "5116",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/5116"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2002-1841",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "20020625 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
              "refsource": "VULN-DEV",
              "url": "http://marc.info/?l=vuln-dev\u0026m=102511114021370\u0026w=2"
            },
            {
              "name": "20020702 Re: Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
              "refsource": "VULN-DEV",
              "url": "http://marc.info/?l=vuln-dev\u0026m=102520790718208\u0026w=2"
            },
            {
              "name": "20020702 Noguska Nola 1.1.1 [ Intranet Business Management Software ]",
              "refsource": "BUGTRAQ",
              "url": "http://online.securityfocus.com/archive/1/280340"
            },
            {
              "name": "nola-php-script-upload(9438)",
              "refsource": "XF",
              "url": "http://www.iss.net/security_center/static/9438.php"
            },
            {
              "name": "5116",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/5116"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2002-1841",
    "datePublished": "2005-06-28T04:00:00.000Z",
    "dateReserved": "2005-06-29T00:00:00.000Z",
    "dateUpdated": "2024-08-08T03:43:33.477Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}