PT-2006-6130 · Free · Freewps

Hackers Pal · Published 2006-10-20 · Updated 2018-10-17 · CVE-2006-5411

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Free Web Publishing System (FreeWPS) versions 2.11 and earlier

Description The issue concerns an unrestricted file upload vulnerability in the upload.php file, which allows remote attackers to upload and execute arbitrary PHP programs.

Recommendations For Free Web Publishing System (FreeWPS) versions 2.11 and earlier, consider restricting access to the upload.php file until a patch is available. As a temporary workaround, disable the execution of uploaded files to prevent arbitrary PHP code execution.

Exploit

Fix

Related Identifiers

CVE-2006-5411

Affected Products

Freewps

References · 7

• 🔥 https://exploit-db.com/exploits/28795 · Exploit
• 🔥 http://securityfocus.com/bid/20494 · Exploit
• http://secunia.com/advisories/19343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-5411 · Security Note
• http://securityfocus.com/archive/1/447870/100/200/threaded · Note
• http://securityreason.com/securityalert/1746 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/29379 · Note