CVEvulnerability

CVE-2005-2781

7.5 HIGH Published 2005-09-02 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-09-02
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.

Affected configurations

• ilia alshanetsky fudforum 2.1.0 • ilia alshanetsky fudforum 2.1.1 • ilia alshanetsky fudforum 2.1.2 • ilia alshanetsky fudforum 2.1.3 • ilia alshanetsky fudforum 2.2.0 • ilia alshanetsky fudforum 2.2.1 • ilia alshanetsky fudforum 2.2.2 • ilia alshanetsky fudforum 2.2.3 • ilia alshanetsky fudforum 2.2.4 • ilia alshanetsky fudforum 2.2.5 • ilia alshanetsky fudforum 2.3.0 • ilia alshanetsky fudforum 2.3.1 • ilia alshanetsky fudforum 2.3.2 • ilia alshanetsky fudforum 2.3.3 • ilia alshanetsky fudforum 2.3.4 • ilia alshanetsky fudforum 2.3.5 • ilia alshanetsky fudforum 2.3.6 • ilia alshanetsky fudforum 2.3.7 • ilia alshanetsky fudforum 2.3.8 • ilia alshanetsky fudforum 2.5.0 • ilia alshanetsky fudforum 2.5.1 • ilia alshanetsky fudforum 2.5.2 • ilia alshanetsky fudforum 2.6.0 • ilia alshanetsky fudforum 2.6.1 • ilia alshanetsky fudforum 2.6.2 • ilia alshanetsky fudforum 2.6.3 • ilia alshanetsky fudforum 2.6.4 • ilia alshanetsky fudforum 2.6.5 • ilia alshanetsky fudforum 2.6.6 • ilia alshanetsky fudforum 2.6.7 • ilia alshanetsky fudforum 2.6.8 • ilia alshanetsky fudforum 2.6.9 • ilia alshanetsky fudforum 2.6.10 • ilia alshanetsky fudforum 2.6.11 • ilia alshanetsky fudforum 2.6.12 • ilia alshanetsky fudforum 2.6.13 • ilia alshanetsky fudforum 2.6.14 • ilia alshanetsky fudforum 2.6.15 • ilia alshanetsky fudforum 2.7.0

References