CVE-2006-2530
Published May 22, 2006
Last updated 6 years ago
Overview
- Description
- avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
- nvd@nist.gov
- CWE-264
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:snitz_communications:avatar_mod:1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E69FB7DC-8795-4E9D-B8CE-A94597B4D159"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.02:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0D89B42F-7738-47EE-871A-FE16C53BCD81"
},
{
"criteria": "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.03:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FD4EF4E8-F8A9-40C4-9F89-8C64A8CF2625"
},
{
"criteria": "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.04:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A31D3D44-EC0B-4502-A1FA-3AE2BF4D4254"
},
{
"criteria": "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.05:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C6E3811E-DE0F-4AEB-A0C8-4115E9188A79"
},
{
"criteria": "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.06:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DF6A7A03-4580-4FB9-958E-992717F2AE72"
},
{
"criteria": "cpe:2.3:a:snitz_communications:snitz_forums_2000:3.4.07:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5108B6BF-64D8-4F14-A237-E6A3F2538B7D"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]