CVE-2006-1800 | BDVDB-2026-16300 Detail

Description#

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://downloads.securityfocus.com/vulnerabilities/exploits/SimpleBBS-RCE-posts.php.pl
https://exchange.xforce.ibmcloud.com/vulnerabilities/25788
http://www.securityfocus.com/archive/1/430872
http://www.securityfocus.com/bid/17501
http://www.worlddefacers.de/Public/WD-SMPL.txt

Exploit#

No public exploit known

History#

Version 12006-04-18Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.