PHP Remote File Inclusion Vulnerability in Free File Hosting by Free Image Hosting
CVE-2006-5762

Currently unrated

Key Information:

Vendor

Free PHP Scripts

Status
Free File Hosting
Free Image Hosting
Vendor
CVE Published:
6 November 2006

What is CVE-2006-5762?

A PHP remote file inclusion vulnerability exists in the forgot_pass.php script of Free File Hosting 1.1 and earlier versions. This vulnerability allows remote attackers to execute arbitrary PHP code on the server through maliciously crafted URLs supplied in the AD_BODY_TEMP parameter. The flaw is also present in Free Image Hosting 2.0, which incorporates the same vulnerable code. Successful exploitation could lead to unauthorized access and manipulation of server files, posing significant risks to affected systems.

References

http://www.rahim.webd.pl/exploity/Exploits/111.txt
x_refsource_MISC
http://www.attrition.org/pipermail/vim/2007-March/001473....
mailing-listx_refsource_VIM
http://secunia.com/advisories/22594
third-party-advisoryx_refsource_SECUNIA

EPSS Score

16% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.