VULNERABILITY INTELLIGENCE
CVE-2006-1363
CVSS score7.5 NONE
EPSS probability2.86%
CISA KEVNot currently listed
Published2006-03-23
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.
Weakness classification
- nvd@nist.gov: NVD-CWE-Other