VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 18, 2006· Updated Jun 16, 2026

CVE-2006-1800

CVE-2006-1800

Description

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Simplemedia/Simplebbs3 versions
    cpe:2.3:a:simplemedia:simplebbs:1.0.6:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:simplemedia:simplebbs:1.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:simplemedia:simplebbs:1.0.7:*:*:*:*:*:*:*
    • cpe:2.3:a:simplemedia:simplebbs:1.1:*:*:*:*:*:*:*
  • SimpleBBS/SimpleBBSllm-create
    Range: 1.0.6 - 1.1

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.