CVE-2007-1726

CVE-2007-1726 describes an unrestricted file upload in IceBB 1.0-rc5, via index.php avatar function, allowing remote authenticated users to place arbitrary files under uploads/. The flaw impacts confidentiality, integrity, and availability (CVSS2 base score 6.5, vector AV:N/AC:L/Au:S/C:P/I:P/A:P)...