CVEvulnerability
CVE-2006-1800
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2006-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log.
Affected configurations
• simplemedia simplebbs 1.0.6
• simplemedia simplebbs 1.0.7
• simplemedia simplebbs 1.1
References
- http://downloads.securityfocus.com/vulnerabilities/exploits/SimpleBBS-RCE-posts.php.pl Exploit
- http://www.securityfocus.com/archive/1/430872 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/17501 Exploit
- http://www.worlddefacers.de/Public/WD-SMPL.txt Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25788 exchange.xforce.ibmcloud.com
- http://downloads.securityfocus.com/vulnerabilities/exploits/SimpleBBS-RCE-posts.php.pl Exploit
- http://www.securityfocus.com/archive/1/430872 Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/17501 Exploit
- http://www.worlddefacers.de/Public/WD-SMPL.txt Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25788 exchange.xforce.ibmcloud.com