Lucene search

K
cveMitreCVE-2006-6994
HistoryFeb 12, 2007 - 11:28 a.m.

CVE-2006-6994

2007-02-1211:28:00
CWE-434
mitre
web.nvd.nist.gov
30
vulnerability
file upload
security
ozzywork gallery
remote attack
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.074

Percentile

94.2%

Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks.

Affected configurations

Nvd
Node
indirmax.orgozzywork_galeriRange2.0
VendorProductVersionCPE
indirmax.orgozzywork_galeri*cpe:2.3:a:indirmax.org:ozzywork_galeri:*:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.074

Percentile

94.2%

Related for CVE-2006-6994