Lucene search
MitreCVE-2006-1800HistoryApr 18, 2006 - 10:02 a.m.
CVE-2006-1800
2006-04-1810:02:00
mitre
web.nvd.nist.gov
26
cve-2006-1800
directory traversal
remote code execution
simplebbs
security vulnerability
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
High
EPSS
0.039
Percentile
92.0%
Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via “…” sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log.
Affected configurations
Node
simplemediasimplebbsMatch1.0.6
ORsimplemediasimplebbsMatch1.0.7
ORsimplemediasimplebbsMatch1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| simplemedia | simplebbs | 1.0.6 | cpe:2.3:a:simplemedia:simplebbs:1.0.6:*:*:*:*:*:*:* |
| simplemedia | simplebbs | 1.0.7 | cpe:2.3:a:simplemedia:simplebbs:1.0.7:*:*:*:*:*:*:* |
| simplemedia | simplebbs | 1.1 | cpe:2.3:a:simplemedia:simplebbs:1.1:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2006-1800
2006-04-18 10:02:00
prion
prion
Directory traversal
2006-04-18 10:02:00
cvelist
cvelist
CVE-2006-1800
2006-04-18 10:00:00
exploitdb
exploitdb
SimpleBBS 1.0.6/1.0.7/1.1 - Arbitrary Command Execution
2006-04-13 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
High
EPSS
0.039
Percentile
92.0%
Related for CVE-2006-1800