high7.5Public exploit code
CVE-2006-5411
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- FreeWPS 2.11 - 'upload.php' Remote Command Execution2006-10-12 · webapps · php · Verified
Impact
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Justin White | Freewps | through 2.11 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19343
- http://securityreason.com/securityalert/1746
- http://www.securityfocus.com/archive/1/447870/100/200/threaded
- http://www.securityfocus.com/bid/20494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29379
- http://secunia.com/advisories/19343
- http://securityreason.com/securityalert/1746
- http://www.securityfocus.com/archive/1/447870/100/200/threaded
- http://www.securityfocus.com/bid/20494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29379