VYPR
← All advisories
Unrated severityNVD Advisory· Published May 2, 2005· Updated Jun 16, 2026

CVE-2005-1031

CVE-2005-1031

Description

RUNCMS 1.1A, and possibly other products based on e-Xoops (exoops), when "Allow custom avatar upload" is enabled, does not properly verify uploaded files, which allows remote attackers to upload arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Runcms/Runcmsllm-fuzzy3 versions
    = 1.1A+ 2 more
    • (no CPE)range: = 1.1A
    • cpe:2.3:a:runcms:runcms:1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:runcms:runcms:1.1a:*:*:*:*:*:*:*
  • E Xoops/E Xoops
    cpe:2.3:a:e-xoops:e-xoops:1.05r3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.