CVE-2006-4631 - Vulnerability Details - OpenCVE

Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php, which is accessible via a direct request.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication Single

Confidentiality Impact Partial

Integrity Impact Partial

Availability Impact Partial

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Softbb	Softbb

Configuration 1 [-]

cpe:2.3:a:softbb:softbb:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://acid-root.new.fr/advisories/10060904.txt
http://secunia.com/advisories/21761
http://securityreason.com/securityalert/1521
http://securitytracker.com/id?1016785
http://www.osvdb.org/28579
http://www.securityfocus.com/archive/1/445087/100/0/threaded
http://www.vupen.com/english/advisories/2006/3478
https://exchange.xforce.ibmcloud.com/vulnerabilities/28749
https://www.exploit-db.com/exploits/2300

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2006-09-08T20:00:00

Updated: 2024-08-07T19:14:47.796Z

Reserved: 2006-09-08T00:00:00

Link: CVE-2006-4631

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2006-09-08T20:04:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2006-4631

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2006-09-04T00:00:00", "descriptions": [{"lang": "en", "value": "Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php, which is accessible via a direct request."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-17T20:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "2300", "tags": ["exploit", "x_refsource_EXPLOIT-DB"], "url": "https://www.exploit-db.com/exploits/2300"}, {"name": "21761", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/21761"}, {"name": "28579", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/28579"}, {"name": "ADV-2006-3478", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2006/3478"}, {"name": "1016785", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://securitytracker.com/id?1016785"}, {"name": "1521", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/1521"}, {"tags": ["x_refsource_MISC"], "url": "http://acid-root.new.fr/advisories/10060904.txt"}, {"name": "softbb-admin-file-include(28749)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28749"}, {"name": "20060904 SoftBB 0.1 Remote PHP Code Execution Exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/445087/100/0/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2006-4631", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php, which is accessible via a direct request."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "2300", "refsource": "EXPLOIT-DB", "url": "https://www.exploit-db.com/exploits/2300"}, {"name": "21761", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/21761"}, {"name": "28579", "refsource": "OSVDB", "url": "http://www.osvdb.org/28579"}, {"name": "ADV-2006-3478", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2006/3478"}, {"name": "1016785", "refsource": "SECTRACK", "url": "http://securitytracker.com/id?1016785"}, {"name": "1521", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/1521"}, {"name": "http://acid-root.new.fr/advisories/10060904.txt", "refsource": "MISC", "url": "http://acid-root.new.fr/advisories/10060904.txt"}, {"name": "softbb-admin-file-include(28749)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28749"}, {"name": "20060904 SoftBB 0.1 Remote PHP Code Execution Exploit", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/445087/100/0/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T19:14:47.796Z"}, "title": "CVE Program Container", "references": [{"name": "2300", "tags": ["exploit", "x_refsource_EXPLOIT-DB", "x_transferred"], "url": "https://www.exploit-db.com/exploits/2300"}, {"name": "21761", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/21761"}, {"name": "28579", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/28579"}, {"name": "ADV-2006-3478", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2006/3478"}, {"name": "1016785", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://securitytracker.com/id?1016785"}, {"name": "1521", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/1521"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://acid-root.new.fr/advisories/10060904.txt"}, {"name": "softbb-admin-file-include(28749)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28749"}, {"name": "20060904 SoftBB 0.1 Remote PHP Code Execution Exploit", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/445087/100/0/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2006-4631", "datePublished": "2006-09-08T20:00:00", "dateReserved": "2006-09-08T00:00:00", "dateUpdated": "2024-08-07T19:14:47.796Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:softbb:softbb:*:*:*:*:*:*:*:*", "matchCriteriaId": "9A724851-3F12-4838-8C39-712CFD472E46", "versionEndIncluding": "0.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Direct static code injection vulnerability in admin/save_opt.php in SoftBB 0.1, and possibly earlier, allows remote authenticated users to upload and execute arbitrary PHP code via the cache_forum parameter, which saves the code to info_options.php, which is accessible via a direct request."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n de c\u00f3digo directo est\u00e1tico en admin/save_opt.php en SoftBB 0.1, y posiblemente anteriores, permite a un usuario validado actualizar y ejecutar c\u00f3digo PHP de su elecci\u00f3n a trav\u00e9s del par\u00e1metro cache_forum, lo cual guarda el c\u00f3digo en info_options.php, el cual es accesible a trav\u00e9s de una respuesta directa."}], "id": "CVE-2006-4631", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 8.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2006-09-08T20:04:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Vendor Advisory"], "url": "http://acid-root.new.fr/advisories/10060904.txt"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/21761"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/1521"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1016785"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/28579"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/445087/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2006/3478"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28749"}, {"source": "cve@mitre.org", "url": "https://www.exploit-db.com/exploits/2300"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Vendor Advisory"], "url": "http://acid-root.new.fr/advisories/10060904.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/21761"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/1521"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://securitytracker.com/id?1016785"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/28579"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/445087/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.vupen.com/english/advisories/2006/3478"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/28749"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://www.exploit-db.com/exploits/2300"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}