CVE-2006-4558: DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading…

PriorityP345high7.5CVSS 2.0

AVNACLAuNCPIPAP

EXPLOIT

EPSS

4.16%

89.6th percentile

DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
deluxebb	deluxebb	<= 1.06	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.