← Back

CVE-2006-2319

nvd nist
Published: May 12, 2006Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:N/I:P/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename.

Affected (16)

Ideal Science
1 product
Idealbb
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Ideal Science
Idealbb
Version 1.5.0_beta1
Idealbb
Version 1.5.0_beta2
Idealbb
Version 1.5.0_beta3
Idealbb
Version 1.5.0_beta4
Idealbb
Version 1.5.0_rc1
Idealbb
Version 1.5.1
Idealbb
Version 1.5.2
Idealbb
Version 1.5.2a
Idealbb
Version 1.5.2b
Idealbb
Version 1.5.2c
Idealbb
Version 1.5.3
Idealbb
Version 1.5.3_beta1
Idealbb
Version 1.5.3_beta2
Idealbb
Version 1.5.3a
Idealbb
Version 1.5.3b
Idealbb
Version 1.5.4a

References (18)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.