Unrestricted file upload vulnerability in add.asp in... · CVE-2006-6994 · GitHub Advisory Database · GitHub

Unrestricted file upload vulnerability in add.asp in...

Moderate severity Unreviewed Published May 1, 2022 to the GitHub Advisory Database • Updated Jan 26, 2024

Package

No package listed— Suggest a package

Affected versions

Unknown

Patched versions

Unknown

Description

Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks.

References

Published by the National Vulnerability Database

Feb 12, 2007

Published to the GitHub Advisory Database May 1, 2022

Last updated Jan 26, 2024