Description
Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks.
References
- 20060509 # MHG Security Team --- OzzyWork Gallery Upload Vulnerabilities mailing-list
- 25427 vdb-entry
- ADV-2006-1768 vdb-entry
- ozzyworkgaleri-add-file-upload(26365) vdb-entry
- 20049 third-party-advisory
- 17946 vdb-entry