Unrated severityNVD Advisory· Published Feb 15, 2006· Updated Apr 16, 2026

CVE-2006-0695

Description

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory.

Affected products

Ansilove/Ansilove2 versions
cpe:2.3:a:ansilove:ansilove:1.01:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ansilove:ansilove:1.01:*:*:*:*:*:*:*
- cpe:2.3:a:ansilove:ansilove:1.02:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

secunia.com/advisories/18810nvdPatchVendor Advisory
sourceforge.net/project/shownotes.phpnvdPatch
www.securityfocus.com/bid/16603nvd
www.vupen.com/english/advisories/2006/0536nvd
exchange.xforce.ibmcloud.com/vulnerabilities/24684nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.003
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000