CVE-2006-0936: Free Host Shop Website Generator

Medium severity, CVSS 6.5. EPSS: 2.3% chance of exploitation in the next 30 days.

Free Host Shop Website Generator 3.3 allows remote authenticated users with administrative privileges to upload and execute arbitrary files via a formname parameter with a filename containing a dangerous file extension and a trailing %00.

Affected products

• Free Host Shop Website Generator: version 3.3 only

Published 2006-02-28. Last modified 2026-06-16.