CVE-2005-2614: Crosscom Olicom Discuz

High severity, CVSS 7.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Discuz! 4.0 rc4 does not properly restrict types of files that are uploaded to the server, which allows remote attackers to execute arbitrary commands via a filename containing ".php.rar" or other multiple extensions that include .php.

Affected products

• Crosscom Olicom Discuz: up to and including 4.0_rc4

Published 2005-08-17. Last modified 2026-06-16.