Unscored severity · published Mar 23, 2006
CVE-2006-1363
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload…
–
CVSS
2.9%
EPSS
No
On KEV
Description
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freewps · Justin White
2.11 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1363
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1363
secunia.com
http://secunia.com/advisories/19343
www.vupen.com
http://www.vupen.com/english/advisories/2006/1038
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/25377
www.exploit-db.com
https://www.exploit-db.com/exploits/1600
More from Freewps
–
CVE-2006-5411
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary…