Dcforum 2000

dcforum_2000

Vendor: Dcscripts • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2001-0527 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Aug 14, 2001 N/A· v4 N/A· v3 10.0 HIGH· v2 DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (\|) and newlines into the last name in the registration form, which will create an extra entry i...Show more DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (\|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.Show less
CVE-2001-0437 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Jul 2, 2001 N/A· v4 N/A· v3 5.0 MEDIUM· v2 upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.
CVE-2001-0436 1Dcscripts 2Dcforum Dcforum 2000 Apr 16, 2026 Jul 2, 2001 N/A· v4 N/A· v3 7.5 HIGH· v2 dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a .. (dot dot) in the AZ parameter to reference the program.