CVE-2005-4135

SimpleBBS 1.1 - Remote Command Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2005-4135 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBSimpleBBS 1.1 - Remote Command ExecutionExploitDB exploitby unitedasiaNot analyzed1 file
ExploitDB
PoC details

References

6