DCScripts DCForum versions 2000 and earlier allow a remote attacker to gain additional privileges by inserting pipe symbols (|) and newlines into the last name in the registration form, which will create an extra entry in the registration database.
| Software | From | Fixed in |
|---|---|---|
| dcscripts / dcforum_2000 | 1.0 | 1.0.x |
| dcscripts / dcforum | 6.0 | 6.0.x |