CVE-2006-0695 | BDVDB-2026-15164 Detail

Description#

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/24684
http://www.vupen.com/english/advisories/2006/0536
http://sourceforge.net/project/shownotes.php?release_id=392826
http://www.securityfocus.com/bid/16603
http://secunia.com/advisories/18810

Exploit#

No public exploit known

History#

Version 12006-02-15Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.