• info
• discussion
• exploit
• solution
• references

IceBB Avatar Upload Remote PHP Code Execution Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept exploit is available:

• /data/vulnerabilities/exploits/IceBB_Avatar_rexp_.pl
• /data/vulnerabilities/exploits/IceBB_Avatar_Admin_rexp.pl