high7.5Public exploit code
CVE-2006-1363
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeWPS 2.11 - 'images.php' Remote Code Execution2006-03-21 · webapps · php · Verified
Impact
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Justin White | Freewps | Version 2.11 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19343
- http://www.vupen.com/english/advisories/2006/1038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25377
- https://www.exploit-db.com/exploits/1600
- http://secunia.com/advisories/19343
- http://www.vupen.com/english/advisories/2006/1038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25377
- https://www.exploit-db.com/exploits/1600