Unscored severity · published Oct 20, 2006
CVE-2006-5411
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freewps · Justin White
through 2.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-5411
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-5411
Vendor Advisory
http://secunia.com/advisories/19343
securityreason.com
http://securityreason.com/securityalert/1746
www.securityfocus.com
http://www.securityfocus.com/archive/1/447870/100/200/threaded
Exploit
http://www.securityfocus.com/bid/20494
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/29379
More from Freewps
–
CVE-2006-1363
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload…