Back to Database
Status published
Critical
CVE-2007-1725
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote...
Vulnerability Description
SQL injection vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to execute arbitrary SQL commands via the filename of an uploaded file to the avatar function, as demonstrated by setting admin privileges.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-1725
Credits & Attribution
No credits recorded in the NVD database.
References
More from icebb
View All →CVE-2008-4431
SQL injection vulnerability in index.php in IceBB 1.0-rc9.3 and earlier...
High
7.5
CVE-2008-3416
SQL injection vulnerability in modules/members.php in IceBB before 1.0-rc9.3 allows...
High
7.5
CVE-2007-6083
SQL injection vulnerability in admin/index.php in IceBB 1.0-rc6 allows remote...
High
7.5
CVE-2007-1726
Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows...
Medium
6.5
Affected Vendor
icebb
View all reports →Affected Software
icebb
Vulnerable Versions:
1.0_rc_5
Timeline
Official Publish:
March 28th, 2007
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.