CVE-2007-1726 Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to upload arbitrary files via the avatar function, which can later be accessed in uploads/.
MediumCVSS 6.5
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to upload arbitrary files via the avatar function, which can later be accessed in uploads/.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| icebb | = 1.0_rc_5 | No fix listed |
References
- 34498 vdb-entry
- 24644 third-party-advisory vendor-advisory
- 23151 vdb-entry
- ADV-2007-1116 vdb-entry
- icebb-index-file-upload(33242) vdb-entry
- 3581 exploit