CVE-2005-2781 - CVE House
Back to Database
Status published High CVE-2005-2781

The Avatar upload feature in FUD Forum before 2.7.0 does...

Vulnerability Description

The Avatar upload feature in FUD Forum before 2.7.0 does not properly verify uploaded files, which allows remote attackers to execute arbitrary PHP code via a file with a .php extension that contains image data followed by PHP code.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2781

Credits & Attribution

No credits recorded in the NVD database.

References

More from ilia alshanetsky

View All →
CVE-2005-2600
FUDForum 2.6.15 with "Tree View" enabled, as used in other...
Medium 5
CVE-2002-1423
tmp_view.php in FUDforum before 2.2.0 allows remote attackers to read...
Medium 5
CVE-2002-1422
admbrowse.php in FUDforum before 2.2.0 allows remote attackers to create...
Medium 5
CVE-2002-1421
SQL injection vulnerabilities in FUDforum before 2.2.0 allow remote attackers...
High 7.5

Affected Vendor

ilia alshanetsky

View all reports →

Affected Software

fudforum
Vulnerable Versions:
2.1.0, 2.1.1, 2.1.2, 2.1.3, 2.2.0, 2.2.1, 2.2.2, 2.2.3, 2.2.4, 2.2.5, 2.3.0, 2.3.1, 2.3.2, 2.3.3, 2.3.4, 2.3.5, 2.3.6, 2.3.7, 2.3.8, 2.5.0, 2.5.1, 2.5.2, 2.6.0, 2.6.1, 2.6.2, 2.6.3, 2.6.4, 2.6.5, 2.6.6, 2.6.7, 2.6.8, 2.6.9, 2.6.10, 2.6.11, 2.6.12, 2.6.13, 2.6.14, 2.6.15, 2.7.0

Timeline

Official Publish: September 2nd, 2005
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.