VYPR
← All advisories
Unrated severityNVD Advisory· Published May 2, 2005· Updated Jun 16, 2026

CVE-2005-1031

CVE-2005-1031

Description

RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • E Xoops/E Xoops
    cpe:2.3:a:e-xoops:e-xoops:1.05r3:*:*:*:*:*:*:*
  • Runcms/Runcms3 versions
    cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*
    • (no CPE)range: = 1.1A

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.