Lucene search
+L

2 matches found

NVD
NVD
•added 2006/09/08 8:04 p.m.•21 views

CVE-2006-4631

Direct static code injection vulnerability in admin/saveopt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cacheforum parameter, which saves the code to infooptions.php, which is accessible via a direct request...

6.5CVSS7.4AI score0.03023EPSS
SaveExploits2References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2006/09/08 12:00 a.m.•4 views

CVE-2006-4631: Undefined Security Weakness

Direct static code injection vulnerability in admin/saveopt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cacheforum parameter, which saves the code to infooptions.php, which is accessible via a direct request...

6.5CVSS6.3AI score0.03023EPSS
SaveExploits2References1
Rows per page
Query Builder