# CVE-2002-1841

## Summary

- **CVE ID:** CVE-2002-1841
- **Severity:** UNKNOWN
- **CVSS Score:** 0.03
- **CWE:** N/A
- **Published:** Jun 28, 2005
- **Last Modified:** Mar 16, 2026

## Description

The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4.

## Affected Products

- n/a — n/a (n/a)

## References

- [CNA](http://marc.info/?l=vuln-dev&m=102511114021370&w=2)
- [CNA](http://marc.info/?l=vuln-dev&m=102520790718208&w=2)
- [CNA](http://online.securityfocus.com/archive/1/280340)
- [CNA](http://www.iss.net/security_center/static/9438.php)
- [CNA](http://www.securityfocus.com/bid/5116)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.72%
- **EPSS Percentile:** 72.1

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-17._