DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dcforum | Dcscripts | 6.0 (including) | 6.0 (including) |
| Dcforum_2000 | Dcscripts | 1.0 (including) | 1.0 (including) |