CVE-2006-4758 File upload in n/a

Medium 4.6 Published 13 Sep 2006 Updated 7 Aug 2024

Authenticated administrators can upload arbitrary files via null byte injection in avatar paths, potentially leading to remote code execution.

Exploited in the wild: Not known
Login needed: An administrator
Attackable: Over the internet
Victim action needed: Not needed
Fix: Available

What is CVE-2006-4758?

CVE-2006-4758 is a medium-severity vulnerability in Phpbb Group Phpbb, published on 13 Sep 2006. An attacker needs administrator access to exploit it, with no action from the victim.

Official description

phpBB 2.0.21 does not properly handle pathnames ending in %00, which allows remote authenticated administrative users to upload arbitrary files, as demonstrated by a query to admin/admin_board.php with an avatar_path parameter ending in .php%00.

Which versions are affected by CVE-2006-4758?

It affects 1 product.

Products include Phpbb Group Phpbb.

How do I fix CVE-2006-4758?

Upgrade to a fixed version.

Is CVE-2006-4758 being exploited?

There is no known exploitation of CVE-2006-4758 in the wild and no public exploit code.

All Phpbb Group Phpbb vulnerabilities

Sources

Also known as GHSA-97xh-65pc-g79h.