CVE-2006-2319: Ideal Science Idealbb

Medium severity, CVSS 5.0. EPSS: 1.9% chance of exploitation in the next 30 days.

Ideal Science Ideal BB 1.5.4a and earlier does not properly check file extensions before permitting an upload, which allows remote attackers to upload and execute an ASP script via a 0x00 character before the ".asp" portion of the filename.

Affected products

• Ideal Science Idealbb: version 1.5.0_beta1 only; version 1.5.0_beta2 only; version 1.5.0_beta3 only; version 1.5.0_beta4 only; version 1.5.0_rc1 only; version 1.5.1 only; …

Published 2006-05-12. Last modified 2026-06-16.