CVE-2005-4135

SimpleBBS <1.1 - Code Injection

Title source: llm

Description

Direct static code injection vulnerability in includes/newtopic.php in SimpleBBS 1.1 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the Host header (possibly the name parameter or variable), which is then written to data/topics.php.

Exploits (1)

exploitdb WORKING POC VERIFIED

by unitedasia · cwebappsphp

https://www.exploit-db.com/exploits/1361

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://securitytracker.com/id?1015323

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/418838/100/0/threaded

[Third Party Advisory] http://www.vupen.com/english/advisories/2005/2807

[Exploit] http://www.securityfocus.com/bid/15764

[Vendor Advisory] http://secunia.com/advisories/17949

Scores

EPSS 0.1480

EPSS Percentile 94.5%

Details

Status published

Products (3)

simplemedia/simplebbs 1.0.6

simplemedia/simplebbs 1.0.7

simplemedia/simplebbs 1.1

Published Dec 09, 2005

Tracked Since Feb 18, 2026