← Back

Freewps

freewps

Vendor: Justin White • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Justin White
1Freewps
Apr 23, 2026
Oct 20, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.
1Justin White
1Freewps
Apr 16, 2026
Mar 23, 2006
N/A· v4
N/A· v3
7.5 HIGH· v2
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath paramet...Show more
images.php in Justin White (aka YTZ) Free Web Publishing System (FreeWPS) 2.11 allows remote attackers to execute arbitrary PHP code by uploading a .php file into the /upload directory as specified in the dirPath parameter, then performing a direct request to that file.Show less