CVE-2002-1038 Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload Fi...
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| michael dean double choco latte | = 2002-01-20 | No fix listed |
| michael dean double choco latte | = 2002-02-15 | No fix listed |
References
- 20020714 [VulnWatch] Double Choco Latte multiple vulnerabilities mailing-list
- dcl.sourceforge.net
- 20020714 Double Choco Latte multiple vulnerabilities mailing-list
- dcl-file-upload(9742) patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1038 vendor-advisory