Mambo and Joomla! SimpleBoard 'image_upload.php' Arbitrary File Upload Vulnerability

Bugtraq ID:	31981
Class:	Input Validation Error
CVE:	CVE-2008-6814
Remote:	Yes
Local:	No
Published:	Oct 29 2008 12:00AM
Updated:	Apr 16 2015 05:52PM
Credit:	t0pP8uZz
Vulnerable:	Two Shoes Mambo Factory SimpleBoard 1.0.1
Not Vulnerable:

Mambo and Joomla! SimpleBoard 'image_upload.php' Arbitrary File Upload Vulnerability

SimpleBoard is prone to a vulnerability that lets remote attackers upload and execute arbitrary script code on an affected computer with the privileges of the webserver process. The issue occurs because the application fails to check file extensions properly.

SimpleBoard 1.0.1 is vulnerable; other versions may also be affected.

Mambo and Joomla! SimpleBoard 'image_upload.php' Arbitrary File Upload Vulnerability

Attackers may exploit this issue via a browser.

The following exploit is available:

• /data/vulnerabilities/exploits/31981.pl

Mambo and Joomla! SimpleBoard 'image_upload.php' Arbitrary File Upload Vulnerability

Solution:
Reportedly, the affected script is not included in later versions of SimpleBoard. Symantec has not been able to confirm this information. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Mambo and Joomla! SimpleBoard 'image_upload.php' Arbitrary File Upload Vulnerability

References:

• Simpleboard Download Page (Mamboportal.com)