CVE-2001-0527 DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will cre...
HighCVSS 10.0
EPSS 4.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dcscripts dcforum | = 6.0 | No fix listed |
| dcscripts dcforum 2000 | = 1.0 | No fix listed |
References
- 20010515 DCForum Password File Manipukation Vulnerability (qDefense Advisory Number QDAV-5-2000-2) exploit mailing-list vendor-advisory
- www.dcscripts.com patch
- 480 vdb-entry
- 2728 vdb-entry
- dcforum-cgi-admin-access(6538) vdb-entry