← Database

CVE-2006-6879

MEDIUM CVSS: 6.0 Published: 2006-12-31 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated users to upload arbitrary PHP scripts to the gfx/ and files/ directories via the userfile parameter.

Affected Platforms

Php-Update Php-Update

Weakness Type

NVD-CWE-Other

References