CVE-2006-6361: Bitflux Upload Progress Meter

High severity, CVSS 10.0. EPSS: 6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the uploadprogress_php_rfc1867_file function in uploadprogress.c in Bitflux Upload Progress Meter before 8276 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted HTTP POST fileupload requests.

Affected products

• Bitflux Upload Progress Meter: version 8215 only; version 8275 only

Published 2006-12-07. Last modified 2026-06-16.