CVE-2006-6879

Unrestricted file upload vulnerability in admin/uploads.php in PHP-Update 2.7 and earlier allows remote authenticated users to upload arbitrary PHP scripts to the gfx/ and files/ directories via the userfile parameter.

• http://secunia.com/advisories/23486Vendor Advisory
• http://www.securityfocus.com/bid/21789Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31125
• https://www.exploit-db.com/exploits/3017
• https://www.exploit-db.com/exploits/3020
• http://secunia.com/advisories/23486Vendor Advisory
• http://www.securityfocus.com/bid/21789Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31125
• https://www.exploit-db.com/exploits/3017
• https://www.exploit-db.com/exploits/3020

Published

Dec 31, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6873Multiple SQL injection vulnerabilities in mod.php in eNdones…
• CVE-2006-6874Multiple cross-site scripting (XSS) vulnerabilities in frien…
• CVE-2006-6875Buffer overflow in the validateospheader function in the Ope…
• CVE-2006-6876Buffer overflow in the fetchsms function in the SMS handling…
• CVE-2006-6877Directory traversal vulnerability in index.php in Matteo Luc…
• CVE-2006-6878admin/uploads.php in PHP-Update 2.7 and earlier allows remot…
• CVE-2006-6880Multiple SQL injection vulnerabilities in code/guestadd.php …
• CVE-2006-6881Buffer overflow in the Get_Wep function in cofvnet.c for ATM…
• CVE-2006-6882Cross-site scripting (XSS) vulnerability in golden book allo…
• CVE-2006-6883PHP remote file inclusion vulnerability in php4you.php in PH…
• CVE-2006-6884Buffer overflow in the WZFILEVIEW.FileViewCtrl.61 ActiveX co…
• CVE-2006-6885An ActiveX control in SwDir.dll in Macromedia Shockwave 10 a…