Vulnerability in Free Host Shop Website Generator
CVE-2006-0936
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00.
EPSS: 0.023 (81.2th percentile) — read the EPSS interpretation.
Affected products
- Free_host_shop Website_generator — versions 3.3
- N/a — versions n/a
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Exploit, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)