Vulnerability Database

299,749

Total vulnerabilities in the database

CVE-2007-1726

Unrestricted file upload vulnerability in index.php in IceBB 1.0-rc5 allows remote authenticated users to upload arbitrary files via the avatar function, which can later be accessed in uploads/.

Published: Mar 28, 2007
Updated: Nov 9, 2025
CVE: CVE-2007-1726
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 6.5
AV:N/AC:L/Au:S/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
icebb / icebb	1.0_rc_5	1.0_rc_5.x

http://osvdb.org/34498
http://secunia.com/advisories/24644
http://www.securityfocus.com/bid/23151
http://www.vupen.com/english/advisories/2007/1116
https://exchange.xforce.ibmcloud.com/vulnerabilities/33242
https://www.exploit-db.com/exploits/3581

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo