CVE-2002-0430: Sun Cobalt Raq 2
Low severity, CVSS 3.7. EPSS: 0.9% chance of exploitation in the next 30 days.
MultiFileUploadHandler.php in the Sun Cobalt RaQ XTR administration interface allows local users to bypass authentication and overwrite arbitrary files via a symlink attack on a temporary file, followed by a request to MultiFileUpload.php.
Affected products
Published 2002-08-12. Last modified 2026-06-16.