CVE:CVE-2002-1038
CNNVD:CNNVD-200210-008
Double Choco Latte (DCL) 20020706之前的版本在文件上传是不能正确查证。远程攻击者借助(1) Projects: 上传文件附录或者(2) Work Orders: 输入特征在任意文件上进行某些操作。
solution:Upgrade michael_dean double_choco_latte to a higher version than 2002-01-20,2002-02-15,and avoid the version 2002-01-20,2002-02-15