← back
CVE-2006-4558

CVE-2006-4558

EPSS 4.2%
DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/1797unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://archives.neohapsis.com/archives/bugtraq/2006-05/0318.htmlhttp://retrogod.altervista.org/deluxebb_106_xpl.htmlhttp://secunia.com/advisories/20135http://securityreason.com/securityalert/1492https://exchange.xforce.ibmcloud.com/vulnerabilities/26485http://www.vupen.com/english/advisories/2006/1843