Approved changes feed: RSS · Atom

cpe:2.3:a:free_php_scripts:free_file_hosting:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFree Php Scripts (419c74cc-c7ca-5822-93b9-ff107a629081)
ProductFree File Hosting (05763386-e813-5d0d-a419-1107e109df7a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-5764 vulnerable 2026-06-08 04:49:21.265712 Details available
PHP remote file inclusion vulnerability in contact.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting.
Published: 2006-11-06T23:00:00.000Z
Updated: 2024-08-07T20:04:55.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5763 vulnerable 2026-06-08 04:49:21.265357 Details available
Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter to (1) login.php, (2) register.php, or (3) send.php. NOTE: the original provenance of this information is unknown; the details are obtained solely from third party information. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting. Vector 1 also affects Free Image Hosting 2.0, which contains the same code.
Published: 2006-11-06T23:00:00.000Z
Updated: 2024-08-07T20:04:55.337Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-5762 vulnerable 2026-06-08 04:49:21.264327 Details available
PHP remote file inclusion vulnerability in forgot_pass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the AD_BODY_TEMP parameter. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting. This also affects Free Image Hosting 2.0, which contains the same code.
Published: 2006-11-06T23:00:00.000Z
Updated: 2024-08-07T20:04:55.409Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.