CVE-2006-5918

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-11-15 · updated 2026-06-16

Description

Unrestricted file upload vulnerability in RapidKill (aka PHP Rapid Kill) 5.7 Pro, and certain other versions, allows remote attackers to upload and execute arbitrary PHP scripts via the "Link to Download" field. NOTE: it is possible that the field value is restricted to files on specific public web sites.

Affected products

Php Rapid Kill: 5.7_pro

References

http://securityreason.com/securityalert/1862
http://www.securityfocus.com/archive/1/450681/100/0/threaded
http://www.securityfocus.com/bid/20896
http://securityreason.com/securityalert/1862
http://www.securityfocus.com/archive/1/450681/100/0/threaded
http://www.securityfocus.com/bid/20896

Get alerted when CVE-2006-5918 or the next vulnerability affects your stack