cbcvebase.
CVE-2005-2781
published 2005-09-02

CVE-2005-2781: The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a…

PriorityP338high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.89%
77.0th percentile
The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.

Affected

39 ranges· showing 25
VendorProductVersion rangeFixed in
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
ilia_alshanetskyfudforum——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.