CVE-2006-5764

PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting.

Score
CVSS 2.0 7.5 High
Status
Modified - cve@mitre.org
Published
2006-11-06
Last modified
2024-08-07
Weaknesses
CWE-94

Affected products

References

 
 
© AVABIS GmbH privacypolicy about