cve/2006/CVE-2006-4631.md

CVE-2006-4631

Description

Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php, which is accessible via a direct request.

POC

Reference

• http://securityreason.com/securityalert/1521
• http://securityreason.com/securityalert/1521
• https://www.exploit-db.com/exploits/2300
• https://www.exploit-db.com/exploits/2300

Github

No PoCs found on GitHub currently.