CVE-2006-5411

Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2006-10-20

Last modified

2024-08-07

Affected products

• Freewps (Justin White)

References

• http://secunia.com/advisories/19343
• http://securityreason.com/securityalert/1746
• http://www.securityfocus.com/archive/1/447870/100/200/threaded
• http://www.securityfocus.com/bid/20494
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29379