CVE-2005-1580

Description

users.ini.php in BoastMachine 3.0 does not properly restrict the types of files that can be uploaded, which allows remote attackers to execute arbitrary code.

Affected products

• boastmachine / boastmachine3.0 – 3.0

References

• MISChttp://www.osvdb.org/16334
• VENDOR_ADVISORYhttp://secunia.com/advisories/15312
• MISChttp://www.kernelpanik.org/docs/kernelpanik/bmachines.txt
• MISChttp://www.securityfocus.com/bid/13600