Unrated severityNVD Advisory· Published Mar 14, 2006· Updated Apr 16, 2026
CVE-2006-1208
CVE-2006-1208
Description
Sergey Korostel PHP Upload Center allows remote attackers to execute arbitrary PHP code by uploading a file whose name ends in a .php.li extension, which can be accessed from the upload directory.
Affected products
1- cpe:2.3:a:sergey_korostel:php_upload_center:*:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
8- biyosecurity.be/bugs/phpuploadcenter2.txtnvdExploit
- www.blogcu.com/Liz0ziM/317250/nvdExploitURL Repurposed
- secunia.com/advisories/19107nvdVendor Advisory
- www.scripts-by.net/PHP/File-Manipulation/php-upload-center.htmlnvdURL Repurposed
- securityreason.com/securityalert/564nvd
- www.osvdb.org/23626nvd
- www.securityfocus.com/archive/1/427215/100/0/threadednvd
- www.vupen.com/english/advisories/2006/0817nvd
News mentions
0No linked articles in our index yet.