CVE-2001-0527

CVE-2001-0527 describes a critical privilege escalation vulnerability in DCScripts DCForum versions 2000 and earlier. An unauthenticated remote attacker can exploit this flaw by injecting pipe symbols and newlines into the registration form's last name field, creating an unauthorized entry in the registration database and gaining elevated privileges. This vulnerability carries a CVSS score of 10.0 (HIGH), indicating a complete compromise of confidentiality, integrity, and availability with low attack complexity and no authentication required. While not listed in CISA's KEV catalog, an ExploitDB entry exists (EDB-20849) detailing a remote admin privilege arbitrary command exploit, though there is no evidence of active exploitation, Metasploit modules, Nuclei templates, or significant community discussion.