CVE-2006-6994

Unrestricted file upload vulnerability in OzzyWork Gallery’s add.asp (version 2.0 and earlier) allows remote attackers to upload and execute arbitrary ASP files by bypassing client-side security checks. Affected component: OzzyWork Gallery add.asp; root cause: lack of proper server-side validatio...