Lucene search
HistoryFeb 28, 2006 - 11:02 a.m.
CVE-2006-0936
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.014
Percentile
86.2%
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00.
Affected configurations
Node
free_host_shopwebsite_generatorMatch3.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| free_host_shop | website_generator | 3.3 | cpe:2.3:a:free_host_shop:website_generator:3.3:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2006-0936
2006-02-28 11:00:00
cve
cve
CVE-2006-0936
2006-02-28 11:02:00
prion
prion
Server side request forgery (ssrf)
2006-02-28 11:02:00
exploitdb
exploitdb
FreeHostShop Website Generator 3.3 - Arbitrary File Upload
2006-02-25 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
7
Confidence
Low
EPSS
0.014
Percentile
86.2%
Related for NVD:CVE-2006-0936