Unrated severityNVD Advisory· Published Oct 20, 2006· Updated Apr 23, 2026

CVE-2006-5411

Description

Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.

Affected products

Justin White/Freewps
cpe:2.3:a:justin_white:freewps:*:*:*:*:*:*:*:*
Range: <=2.11

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.securityfocus.com/bid/20494nvdExploit
secunia.com/advisories/19343nvdVendor Advisory
securityreason.com/securityalert/1746nvd
www.securityfocus.com/archive/1/447870/100/200/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/29379nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000