Dcscripts

Records10All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Dcscripts records in CISA KEV

No Dcscripts vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Dcforum 6 records MEDIUM Dcforum 2000 3 records MEDIUM Dcforumlite 2 records LOW Dcshop 2 records LOW Dcforum+ 1 record LOW

Records

3 records in Dcforum 2000 · all components

TI-2001-00516 CVE-2001-0527 · GHSA-rr68-4frw-wr7p

DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional…

MEDIUM 50

DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry i…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04539 Published 2002-03-09 No fix listed

TI-2001-00429 CVE-2001-0436 · GHSA-9968-x288-6qqr

dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by…

LOW 37

dcboard.cgi in DCForum 2000 1.0 allows remote attackers to execute arbitrary commands by uploading a Perl program to the server and using a ..

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02381 Published 2001-05-24 No fix listed

TI-2001-00430 CVE-2001-0437 · GHSA-pcp2-j956-2xvp

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files…

LOW 26

upload_file.pl in DCForum 2000 1.0 allows remote attackers to upload arbitrary files without authentication by setting the az parameter to upload_file.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.0172 Published 2001-05-24 No fix listed

Open these records in search →

Critical	1
High	2
Medium	7
Low	0
No CVSS	0