CVE-2002-1038: Michael Dean Double Choco Latte

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

Double Choco Latte (DCL) before 20020706 does not properly verify if a file was uploaded, which allows remote attackers to conduct certain operations on arbitrary files via the (1) Projects: Upload File Attachment or (2) Work Orders: Import features.

Affected products

• Michael Dean Double Choco Latte: version 2002-01-20 only; version 2002-02-15 only

Published 2002-10-04. Last modified 2026-06-16.