CVE-2006-4558

2006-09-0600:00:00

mitre

www.cve.org

AI Score

7.6

Confidence

High

EPSS

0.068

Percentile

93.9%

JSON

DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php.

References

archives.neohapsis.com/archives/bugtraq/2006-05/0318.html

retrogod.altervista.org/deluxebb_106_xpl.html

secunia.com/advisories/20135

securityreason.com/securityalert/1492

www.vupen.com/english/advisories/2006/1843

exchange.xforce.ibmcloud.com/vulnerabilities/26485