CVE-2006-0695

Published: Feb 15, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory.

Affected (2)

Products: Ansilove: Ansilove

Ansilove

1 product

Ansilove

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ansilove Ansilove	Version 1.01
Ansilove Ansilove	Version 1.02

References (10)

http://secunia.com/advisories/18810

Source: cve@mitre.org

PatchVendor Advisory

http://sourceforge.net/project/shownotes.php?release_id=392826

Source: cve@mitre.org

Patch

http://www.securityfocus.com/bid/16603

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/0536

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/24684

Source: cve@mitre.org

http://secunia.com/advisories/18810