VULNERABILITY INTELLIGENCE

CVE-2005-0269

CVSS score9.8 CRITICAL
EPSS probability2.64%
CISA KEVNot currently listed
Published2005-05-02
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.

Weakness classification

  • CWE-178: Improper Handling of Case Sensitivity

Primary references