CVE-2006-2318: Ideal Science Idealbb

High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days.

Incomplete blacklist vulnerability in Ideal Science Ideal BB 1.5.4a and earlier allows remote attackers to upload and execute an ASP script via a ".asa" file, which bypasses the check for the ".asp" extension but is executable on the server.

Affected products

• Ideal Science Idealbb: version 1.4.9 only; version 1.4.9_beta only; version 1.4.9a only; version 1.5.0_beta1 only; version 1.5.0_beta2 only; version 1.5.0_beta3 only; …

Published 2006-05-12. Last modified 2026-06-16.