CVE-2006-2335

Publicada em 12 mai 2006 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 3.5%

Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed. NOTE: the vendor was unable to reproduce this issue in 3.5.x. NOTE: this issue might be due to direct static code injection.

Produtos afetados

n/a · n/a

Referências

http://b3hr0uz.persiangig.com/VbStyleVuln.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/26440 http://www.securityfocus.com/archive/1/433580/100/0/threaded http://www.securityfocus.com/archive/1/433678/100/0/threaded