medium6.5Public exploit code
CVE-2006-0936
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname para…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeHostShop Website Generator 3.3 - Arbitrary File Upload2006-02-25 · webapps · php · Verified
Impact
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Free Host Shop | Website Generator | Version 3.3 |
References
- NVD record
- CVE.org record
- http://nsag.ru/vuln/894.html
- http://secunia.com/advisories/19014
- http://www.securityfocus.com/archive/1/426077/100/0/threaded
- http://www.securityfocus.com/bid/16823
- http://nsag.ru/vuln/894.html
- http://secunia.com/advisories/19014
- http://www.securityfocus.com/archive/1/426077/100/0/threaded
- http://www.securityfocus.com/bid/16823