CVE:CVE-2001-0436
CNNVD:CNNVD-200107-005
DCForum 2000 1.0版本的dcboard.cgi存在漏洞。远程攻击者通过上传Perl程序到服务器和使用AZ参数的 .. (点 点)引用程序执行任意命令。
solution:Upgrade dcscripts dcforum to a higher version than 1.0,2.0,3.0,4.0,5.0,6.0,and avoid the version 1.0,2.0,3.0,4.0,5.0,6.0; Upgrade dcscripts dcforum_2000 to a higher version than 1.0,and avoid the version 1.0