Lucene search
HistoryApr 18, 2006 - 10:02 a.m.
CVE-2006-1800
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.039
Percentile
92.0%
Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via “…” sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log.
Affected configurations
Node
simplemediasimplebbsMatch1.0.6
ORsimplemediasimplebbsMatch1.0.7
ORsimplemediasimplebbsMatch1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| simplemedia | simplebbs | 1.0.6 | cpe:2.3:a:simplemedia:simplebbs:1.0.6:*:*:*:*:*:*:* |
| simplemedia | simplebbs | 1.0.7 | cpe:2.3:a:simplemedia:simplebbs:1.0.7:*:*:*:*:*:*:* |
| simplemedia | simplebbs | 1.1 | cpe:2.3:a:simplemedia:simplebbs:1.1:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2006-1800
2006-04-18 10:02:00
prion
prion
Directory traversal
2006-04-18 10:02:00
cvelist
cvelist
CVE-2006-1800
2006-04-18 10:00:00
exploitdb
exploitdb
SimpleBBS 1.0.6/1.0.7/1.1 - Arbitrary Command Execution
2006-04-13 00:00:00
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
7.3
Confidence
Low
EPSS
0.039
Percentile
92.0%
Related for NVD:CVE-2006-1800