CVE-2005-2781

The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a…

published September 2, 2005

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01890 · 79.4th percentile
Published
2005-09-02T04:00Z
EPSS history
Timeline
  • 02 SEP 04:00Z
    The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a…
    cvelistv5