CVE-2006-6994

2007-02-1211:00:00

mitre

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.074

Percentile

94.2%

JSON

Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks.

References

marc.info/?l=bugtraq&m=114723238307299&w=2

secunia.com/advisories/20049

www.osvdb.org/25427

www.securityfocus.com/bid/17946

www.vupen.com/english/advisories/2006/1768

exchange.xforce.ibmcloud.com/vulnerabilities/26365