Ansilove

ansilove

3 CVEs • 2 products

Products (2)

Click to collapse

Toggle

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-19353 1Ansilove 1Libansilove Nov 21, 2024 Nov 18, 2018 N/A· v4 6.5 MEDIUM· v3 4.3 MEDIUM· v2 The ansilove_ansi function in loaders/ansi.c in libansilove 1.0.0 allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a crafted file.
CVE-2006-0695 1Ansilove 1Ansilove Apr 16, 2026 Feb 15, 2006 N/A· v4 N/A· v3 7.5 HIGH· v2 Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload di...Show more Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory.Show less
CVE-2006-0694 1Ansilove 1Ansilove Apr 16, 2026 Feb 15, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 Unspecified vulnerability in the loaders (load_*.php) in Ansilove before 1.03 allows remote attackers to read arbitrary files via unspecified vectors involving "converting files accessible by the webserver".