CVE-2006-5411: Justin White Freewps

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in upload.php for Free Web Publishing System (FreeWPS), possibly 2.11 and earlier, allows remote attackers to upload and execute arbitrary PHP programs.

Affected products

• Justin White Freewps: up to and including 2.11

Published 2006-10-20. Last modified 2026-06-16.