Unrated severityNVD Advisory· Published Feb 15, 2006· Updated Jun 16, 2026

CVE-2006-0695

Description

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory.

Affected products

Ansilove/Ansilove3 versions
cpe:2.3:a:ansilove:ansilove:1.01:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:ansilove:ansilove:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:ansilove:ansilove:1.02:*:*:*:*:*:*:*
- (no CPE)range: <1.03

Patches

Vulnerability mechanics

References

secunia.com/advisories/18810nvdPatchVendor Advisory
sourceforge.net/project/shownotes.phpnvdPatch
www.securityfocus.com/bid/16603nvd
www.vupen.com/english/advisories/2006/0536nvd
exchange.xforce.ibmcloud.com/vulnerabilities/24684nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000