Lucene search
HistoryDec 09, 2005 - 3:03 p.m.
CVE-2005-4135
cve-2005-4135
code injection
simplebbs
security vulnerability
remote execution
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.043 Low
EPSS
Percentile
92.4%
Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.
Affected configurations
Node
simplemediasimplebbsMatch1.0.6
ORsimplemediasimplebbsMatch1.0.7
ORsimplemediasimplebbsMatch1.1
Related
nessus
nessus
SimpleBBS topics.php name Parameter Arbitrary Command Execution
2005-12-14 00:00:00
cvelist
cvelist
CVE-2005-4135
2005-12-09 15:00:00
nvd
nvd
CVE-2005-4135
2005-12-09 15:03:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
8 High
AI Score
Confidence
High
0.043 Low
EPSS
Percentile
92.4%
Related for CVE-2005-4135