CVE

Id
18422  
CVE No.
CVE-2006-2318  
Status
Candidate  
Description
Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the check for the ".asp" extension but is executable on the server.  
Phase
Assigned (20060511)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
159972 18422 CVE-2006-2318 BUGTRAQ:20060508 Multiple Vulnerabilities In IdealBB ASP Bulletin Board  View
159973 18422 CVE-2006-2318 URL:http://www.securityfocus.com/archive/1/archive/1/433248/100/0/threaded  View
159974 18422 CVE-2006-2318 FULLDISC:20060508 Multiple Vulnerabilities In IdealBB ASP Bulletin Board  View
159975 18422 CVE-2006-2318 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/045887.html  View
159976 18422 CVE-2006-2318 MISC:http://www.idealscience.com/ibb/posts.aspx?postID=24415  View
159977 18422 CVE-2006-2318 BID:17920  View
159978 18422 CVE-2006-2318 URL:http://www.securityfocus.com/bid/17920  View
159979 18422 CVE-2006-2318 VUPEN:ADV-2006-1729  View
159980 18422 CVE-2006-2318 URL:http://www.vupen.com/english/advisories/2006/1729  View
159981 18422 CVE-2006-2318 OSVDB:25456  View
159982 18422 CVE-2006-2318 URL:http://www.osvdb.org/25456  View
159983 18422 CVE-2006-2318 SECUNIA:20035  View
159984 18422 CVE-2006-2318 URL:http://secunia.com/advisories/20035  View
159985 18422 CVE-2006-2318 SREASON:871  View
159986 18422 CVE-2006-2318 URL:http://securityreason.com/securityalert/871  View
159987 18422 CVE-2006-2318 XF:idealbb-asp-file-upload(26353)  View

Related JVN