Published: 06/11/2006 Updated: 17/10/2018

CVSS v2 Base Score: 5.1 | Impact Score: 6.4 | Exploitability Score: 4.9

VMScore: 520

Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals is enabled, allow remote malicious users to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter to (1) login.php, (2) register.php, or (3) send.php. NOTE: the original provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting. Vector 1 also affects Free Image Hosting 2.0, which contains the same code.

Vulnerable Product	Search on Vulmon	Subscribe to Product
free php scripts free image hosting 2.0
free php scripts free file hosting

source: wwwsecurityfocuscom/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible Version 11 is vuln ...

source: wwwsecurityfocuscom/bid/23118/info Free File Hosting is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attacks are also possible Version 11 is v ...

NVD-CWE-Other http://secunia.com/advisories/22594 http://www.osvdb.org/30144 http://www.osvdb.org/30145 http://www.osvdb.org/30146 http://www.attrition.org/pipermail/vim/2007-March/001473.html http://www.securityfocus.com/bid/23118 https://exchange.xforce.ibmcloud.com/vulnerabilities/33196 https://exchange.xforce.ibmcloud.com/vulnerabilities/29874 https://www.exploit-db.com/exploits/3568 http://www.securityfocus.com/archive/1/463707/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/29773/

CVE-2006-5763

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect