Description
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename.
References
- 25456 vdb-entry
- 20035 third-party-advisory
- 20060508 Multiple Vulnerabilities In IdealBB ASP Bulletin Board mailing-list
- ADV-2006-1729 vdb-entry
- 20060508 Multiple Vulnerabilities In IdealBB ASP Bulletin Board mailing-list
- 17920 vdb-entry
- idealbb-asp-file-upload(26353) vdb-entry
- 871 third-party-advisory
- http://www.idealscience.com/ibb/posts.aspx?postID=24415