CVE-2007-1726

EPSS 2.6%

Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to upload arbitrary files via the avatar function, which can later be accessed in uploads/.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3581unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/34498 http://secunia.com/advisories/24644 https://exchange.xforce.ibmcloud.com/vulnerabilities/33242 https://www.exploit-db.com/exploits/3581 http://www.securityfocus.com/bid/23151 http://www.vupen.com/english/advisories/2007/1116