EUVD-2006-0701

Malware in sbrugna...

CVE-2006-0695

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory...

Code injection

Unspecified vulnerability in the loaders load.php in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver"...

CVE-2006-0694

Unspecified vulnerability in the loaders load.php in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver"...

Directory traversal

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory...

CVE-2006-0695

CVE-2006-0695 affects Ansilove prior to 1.03. The issue arises because uploaded file extensions are not filtered, enabling remote attackers to execute arbitrary code by uploading files with dangerous extensions and then accessing them directly in the upload directory. The provided documents do no...

CVE-2006-0694

Unspecified vulnerability in the loaders load.php in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver"...

CVE-2006-0695

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory...

CVE-2006-0694

CVE-2006-0694 affects Ansilove (loaders: load_*.php) before version 1.03. The vulnerability allows remote attackers to read arbitrary files via unspecified vectors involving “converting files accessible by the webserver.” Impact is limited to partial confidentiality. The available documents do no...

[SA18810] Ansilove File Disclosure and File Upload Vulnerabilities

TITLE: Ansilove File Disclosure and File Upload Vulnerabilities SECUNIA ADVISORY ID: SA18810 VERIFY ADVISORY: http://secunia.com/advisories/18810/ CRITICAL: Moderately critical IMPACT: Exposure of system information, Exposure of sensitive information, System access WHERE: From remote SOFTWARE:...