CVEvulnerability

CVE-2005-4135

7.5 HIGH Published 2005-12-09 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-12-09
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.

Affected configurations

• simplemedia simplebbs 1.0.6 • simplemedia simplebbs 1.0.7 • simplemedia simplebbs 1.1

References

http://secunia.com/advisories/17949 Vendor Advisory
http://securitytracker.com/id?1015323 securitytracker.com
http://www.securityfocus.com/archive/1/418838/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/15764 Exploit
http://www.vupen.com/english/advisories/2005/2807 www.vupen.com
http://secunia.com/advisories/17949 Vendor Advisory
http://securitytracker.com/id?1015323 securitytracker.com
http://www.securityfocus.com/archive/1/418838/100/0/threaded www.securityfocus.com
http://www.securityfocus.com/bid/15764 Exploit
http://www.vupen.com/english/advisories/2005/2807 www.vupen.com