CVE-2006-4558

Name of the Vulnerable Software and Affected Versions DeluxeBB versions 1.06 and earlier

Description The issue allows remote attackers to execute arbitrary PHP code by uploading files with double extensions via the fileupload parameter in a newthread action in newpost.php, specifically when run on the Apache HTTP Server with the mod mime module.

Recommendations For DeluxeBB versions 1.06 and earlier, consider restricting access to the newpost.php file or disabling the file upload functionality via the fileupload parameter until a fix is available. Additionally, restricting the use of double extensions in file uploads can help mitigate the risk of exploitation.