CVE-2006-1363

2006-03-2311:00:00

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.042

Percentile

92.3%

JSON

images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.