CVE-2005-0269: Sir Gnuboard

Critical severity, CVSS 9.8. EPSS: 2.6% chance of exploitation in the next 30 days.

The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.

Affected products

• Sir Gnuboard: up to and including 3.40

Published 2005-05-02. Last modified 2026-06-16.