CVE:CVE-2002-0223
CNNVD:CNNVD-200205-041
Infopop UBB.Threads 5.4版本和Wired Community Software WWWThreads 5.0到5.0.9版本存在漏洞。远程攻击者通过使用可接受的扩展名但以另一扩展名结尾文件名上传任意文件。
solution:Upgrade infopop ultimate_bulletin_board to a higher version than 5.4,and avoid the version 5.4; Upgrade wired_community_software wwwthreads to a higher version than 5.0,5.0.6,5.0.8,5.0.9,and avoid the version 5.0,5.0.6,5.0.8,5.0.9