CVE-2006-0936

Published: Feb 28, 2006Modified: Apr 16, 2026

6.5

Vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability: 8.0 / Impact: 6.4

Source: NVD

Description

Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00.

Affected (1)

Products: Free Host Shop: Website Generator

Free Host Shop

1 product

Website Generator

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Free Host Shop Website Generator	Version 3.3

References (8)

http://nsag.ru/vuln/894.html

Source: cve@mitre.org

http://secunia.com/advisories/19014

Source: cve@mitre.org

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/426077/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16823

Source: cve@mitre.org

http://nsag.ru/vuln/894.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19014

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://www.securityfocus.com/archive/1/426077/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/16823

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.