| Package | Affected versions | Patched versions |
|---|---|---|
| idealbb | = 1.5.0_beta1= 1.5.0_beta2= 1.5.0_beta3= 1.5.0_beta4= 1.5.0_rc1= 1.5.1= 1.5.2= 1.5.2a= 1.5.2b= 1.5.2c= 1.5.3= 1.5.3_beta1= 1.5.3_beta2= 1.5.3a= 1.5.3b= 1.5.4a |
Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free