PT-2006-6130 · Free · Freewps

Hackers Pal · Publicado 2006-10-20 · Atualizado 2018-10-17 · CVE-2006-5411

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Free Web Publishing System (FreeWPS) versions 2.11 and earlier

Description The issue concerns an unrestricted file upload vulnerability in the upload.php file, which allows remote attackers to upload and execute arbitrary PHP programs.

Recommendations For Free Web Publishing System (FreeWPS) versions 2.11 and earlier, consider restricting access to the upload.php file until a patch is available. As a temporary workaround, disable the execution of uploaded files to prevent arbitrary PHP code execution.

Exploit

Correção

Identificadores relacionados

CVE-2006-5411

Produtos afetados

Freewps

Referências · 7

• 🔥 https://exploit-db.com/exploits/28795 · Exploit
• 🔥 http://securityfocus.com/bid/20494 · Exploit
• http://secunia.com/advisories/19343 · Aviso do Fabricante
• http://securityfocus.com/archive/1/447870/100/200/threaded · Nota
• http://securityreason.com/securityalert/1746 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29379 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-5411 · Nota de Segurança