CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
95.5%
Unrestricted file upload vulnerability in image_upload.php in the SimpleBoard (com_simpleboard) component 1.0.1 and earlier for Mambo allows remote attackers to execute arbitrary code by uploading a file with an executable extension and an image/jpeg content type, then accessing this file via a direct request to the file in components/com_simpleboard/, a different vulnerability than CVE-2006-3528.
Vendor | Product | Version | CPE |
---|---|---|---|
jan_de_graaff | com_simpleboard | * | cpe:2.3:a:jan_de_graaff:com_simpleboard:*:*:*:*:*:*:*:* |
jan_de_graaff | com_simpleboard | 0.9 | cpe:2.3:a:jan_de_graaff:com_simpleboard:0.9:*:*:*:*:*:*:* |
jan_de_graaff | com_simpleboard | 0.9.1 | cpe:2.3:a:jan_de_graaff:com_simpleboard:0.9.1:*:*:*:*:*:*:* |
jan_de_graaff | com_simpleboard | 0.9.2 | cpe:2.3:a:jan_de_graaff:com_simpleboard:0.9.2:*:*:*:*:*:*:* |
jan_de_graaff | com_simpleboard | 1.0 | cpe:2.3:a:jan_de_graaff:com_simpleboard:1.0:rc1:*:*:*:*:*:* |
jan_de_graaff | com_simpleboard | 1.0 | cpe:2.3:a:jan_de_graaff:com_simpleboard:1.0:rc2:*:*:*:*:*:* |
jan_de_graaff | com_simpleboard | 1.0 | cpe:2.3:a:jan_de_graaff:com_simpleboard:1.0:rc3:*:*:*:*:*:* |
mambo | mambo | * | cpe:2.3:a:mambo:mambo:*:*:*:*:*:*:*:* |