CVE-2005-4135

SimpleBBS <= 1.1 - Remote Code Execution via Host Header Injection

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-4135. PoCs published by unitedasia.

AI-analyzed exploit summary This exploit targets a command injection vulnerability in SimpleBBS <= v1.1 by injecting PHP code into a forum post via a malformed 'name' parameter, then executing arbitrary commands via a crafted GET request. The PoC demonstrates remote code execution (RCE) by leveraging improper input sanitization.

Description

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by unitedasia · cwebappsphp

https://www.exploit-db.com/exploits/1361

View Code ZIP pw:eip

This exploit targets a command injection vulnerability in SimpleBBS <= v1.1 by injecting PHP code into a forum post via a malformed 'name' parameter, then executing arbitrary commands via a crafted GET request. The PoC demonstrates remote code execution (RCE) by leveraging improper input sanitization.

Classification

Working Poc 95%

Attack Type

Rce

Complexity

Trivial

Reliability

Reliable

Target: SimpleBBS <= v1.1

No auth needed

Prerequisites: Target must have SimpleBBS <= v1.1 installed · Target must have write permissions in the 'data' directory · PHP must be enabled on the target server

MITRE ATT&CK

T1190 - Exploit Public-Facing Application T1203 - Exploitation for Client Execution

devstral-2 · analyzed Feb 16, 2026 Full analysis →