CVE-2006-2335

Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell…

published May 12, 2006

CVSS
—
EPSS
3%
Percentile
88.7
In the wild
Unconfirmed
What it is

Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell access by uploading a CSS file that contains PHP code, then selecting the file via the style chooser, which causes the PHP code to be executed. NOTE: the vendor was unable to reproduce this issue in 3.5.x. NOTE: this issue might be due to direct static code injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03386 · 88.7th percentile
Published
2006-05-12T00:00Z
EPSS history
Timeline
  • 12 MAY 00:00Z
    Jelsoft vBulletin accepts uploads of Cascading Style Sheets (CSS) and processes them in a way that allows remote authenticated administrators to gain shell…
    cvelistv5