CRITICAL🇵🇱 Wersja polska

CVE-2005-0269

CVSS 9.8v3.1pub. 2005-05-02upd. 2026-04-16

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Sir Gnuboard

    APP
    Sir
    ≤ 3.40
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2020-18662CRITICAL9.8PL ✓same product

SQL Injection w gnuboard5 przez parametr table_prefix w install_db.php

CVE-2024-41475HIGH8.8same product

Gnuboard g6 6.0.7 is vulnerable to Session hijacking due to a CORS misconfiguration.

CVE-2022-44216HIGH7.5same product

Gnuboard 5.5.4 and 5.5.5 is vulnerable to Insecure Permissions. An attacker can change password of all users w...

CVE-2022-1252HIGH8.2same product

Use of a Broken or Risky Cryptographic Algorithm in GitHub repository gnuboard/gnuboard5 prior to and includin...

CVE-2011-4066HIGH7.5same product

SQL injection vulnerability in bbs/tb.php in Gnuboard 4.33.02 and earlier allows remote attackers to execute a...