Unrated severityNVD Advisory· Published Feb 28, 2006· Updated Apr 16, 2026
CVE-2006-0936
CVE-2006-0936
Description
Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00.
Affected products
1- cpe:2.3:a:free_host_shop:website_generator:3.3:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- secunia.com/advisories/19014nvdExploitVendor Advisory
- nsag.ru/vuln/894.htmlnvd
- www.securityfocus.com/archive/1/426077/100/0/threadednvd
- www.securityfocus.com/bid/16823nvd
News mentions
0No linked articles in our index yet.