CVE-2006-5411 EXPLOIT
7.5
HIGH · CVSS 2.0 · EPSS 2.6% (pctl 85)
Patch early
A public exploit exists.
Description
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.
Scoring
| CVSS | 7.5 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
| EPSS | 2.64% — more likely to be exploited than 85% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2006-10-20 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| justin white | freewps |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | FreeWPS 2.11 - 'upload.php' Remote Command Execution | 2006-10-12 |
References
- http://secunia.com/advisories/19343
- http://securityreason.com/securityalert/1746
- http://www.securityfocus.com/archive/1/447870/100/200/threaded
- http://www.securityfocus.com/bid/20494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29379
- http://secunia.com/advisories/19343
- http://securityreason.com/securityalert/1746
- http://www.securityfocus.com/archive/1/447870/100/200/threaded
- http://www.securityfocus.com/bid/20494
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29379
→ the Explorer · watch your stack · NVD