CVE-2002-1460: L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST (attachment, attachment_name…

PriorityP423medium5CVSS 2.0

AVNACLAuNCPINAN

EPSS

1.91%

77.2th percentile

L-Forum 2.40 and earlier does not properly verify whether a file was uploaded or if the associated variables were set by POST (attachment, attachment_name, attachment_size and attachment_type), which allows remote attackers to read arbitrary files.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
leszek_krupinski	l-forum	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.