CVE-2002-1841: Noguska Nola

Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days.

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.

Affected products

• Noguska Nola: version 1.1.1 only; version 1.1.2 only

Published 2002-12-31. Last modified 2026-06-16.