CVE-2005-4135

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via…

published December 9, 2005

CVSS
—
EPSS
9%
Percentile
95.1
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08619 · 95.1th percentile
Published
2005-12-09T15:00Z
EPSS history
Timeline
  • 09 DEC 15:00Z
    Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via…
    cvelistv5