← Database

CVE-2006-6994

MEDIUM CVSS: 6.4 Published: 2007-02-12 Modified: 2026-06-16

Description

Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks.

Affected Platforms

Indirmax.Org Ozzywork Galeri

Weakness Type

CWE-434

References