CVE-2006-1208

CVE-2006-1208 affects the Sergey Korostel PHP Upload Center. The vulnerability allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory. The underlying cause is improper handling of uploaded f...

CVE-2006-6360

The CVE-2006-6360 vulnerability affects PHP Upload Center 2.0: activate.php accepts a footerpage parameter that can be controlled by an attacker to include a remote PHP file, enabling arbitrary code execution. It is a networked issue with low access complexity and no authentication, leading to po...

CVE-2006-1207

The CVE-2006-1207 issue affects PHP Upload Center. The vulnerability arises because password hashes are stored under the web root with insufficient access control, allowing remote attackers to download each password hash via a direct request to upload/users/[USERNAME]. The available documents des...