Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2006-1800: SimpleBBS lets attackers run any file via language cookie

CVE-2006-1800 · published 20 years ago

Summary

The SimpleBBS forum software (versions 1.0.6 to 1.1) can be tricked into loading files from the server when a specially crafted language cookie is sent. An attacker could cause the server to execute any file they choose, potentially taking control of the site. Apply the vendor’s update or patch and remove any suspicious files from the server as soon as possible.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
simplemedia	simplebbs	1.0.6 1.0.7 1.1 `cpe:2.3:a:simplemedia:simplebbs:1.0.6:::::::*`

Original advisory text

Directory traversal vulnerability in posts.php in SimpleBBS 1.0.6 through 1.1 allows remote attackers to include and execute arbitrary files via ".." sequences in the language cookie, as demonstrated by by injecting the code into the gl_session cookie of users.php, which is stored in error.log.

References

http://downloads.securityfocus.com/vulnerabilities/exploits/SimpleBBS-RCE-posts.... Exploit
http://www.securityfocus.com/archive/1/430872 Exploit Vendor Advisory
http://www.securityfocus.com/bid/17501 Exploit
http://www.worlddefacers.de/Public/WD-SMPL.txt Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/25788

Fix within

Internet-facing 14 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker partial control (estimated)

Severity

7.5 High

Exploitation

3% chance of attack within 30 days

Timeline

Published18 Apr 2006

Updated30 Oct 2026

First seen29 Sep 2026

Sources

CVE-2006-1800 · NVD

Track software like this

Free during beta