| Package | Affected versions | Patched versions |
|---|---|---|
| deluxebb | ≤ 1.06 |
DeluxeBB 1.06 and earlier, when run on the Apache HTTP Server with the mod_mime module, allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free