CVE-2006-1800

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences…

published April 18, 2006

CVSS
—
EPSS
3%
Percentile
85.7
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02686 · 85.7th percentile
Published
2006-04-18T10:00Z
EPSS history
Timeline
  • 18 APR 10:00Z
    Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences…
    cvelistv5