CVE-2005-1047: High severity Phpbb Group Phpbb vulnerability
Meilad File upload script (up.php) mod for phpBB 2.0.x does not properly limit the types of files that can be uploaded, which allows remote authenticated users to execute arbitrary commands by uploading PHP files, then directly requesting them from the uploads directory.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1047?
CVE-2005-1047 has a medium severity rating due to its ability to allow unauthorized command execution via file uploads.
How do I fix CVE-2005-1047?
To fix CVE-2005-1047, ensure proper file-type validation and restrict uploaded file types in the upload script.
Which versions of phpBB are affected by CVE-2005-1047?
CVE-2005-1047 affects phpBB versions 2.0.0 through 2.0.14.
Can CVE-2005-1047 be exploited remotely?
Yes, CVE-2005-1047 can be exploited by remote authenticated users who upload malicious PHP files.
What type of vulnerability is CVE-2005-1047?
CVE-2005-1047 is a file upload vulnerability that allows execution of arbitrary code through improper file type restrictions.