CVE-2006-5918

Published: Nov 15, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows remote attackers to upload and execute arbitrary PHP scripts via the "Link to Download" field. NOTE: it is possible that the field value is restricted to files on specific public web sites.

Affected (1)

Products: Php Rapid Kill: Php Rapid Kill

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Php Rapid Kill Php Rapid Kill	Version 5.7_pro

References (6)

http://securityreason.com/securityalert/1862

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/450681/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/20896

Source: cve@mitre.org

http://securityreason.com/securityalert/1862

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/450681/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/20896

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.