CVE-2006-2428

N/A Unknown
Published: May 17, 2006 Modified: April 16, 2026
View on NVD

Description

add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw source is vague.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/20102
Source: cve@mitre.org
Broken Link Vendor Advisory
http://securityreason.com/securityalert/911
Source: cve@mitre.org
Third Party Advisory
http://www.securityfocus.com/archive/1/433894/100/0/threaded
Source: cve@mitre.org
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/17993
Source: cve@mitre.org
Broken Link VDB Entry
http://www.vupen.com/english/advisories/2006/1825
Source: cve@mitre.org
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/26457
Source: cve@mitre.org
Third Party Advisory VDB Entry
http://secunia.com/advisories/20102
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Vendor Advisory
http://securityreason.com/securityalert/911
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
http://www.securityfocus.com/archive/1/433894/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link Third Party Advisory VDB Entry
http://www.securityfocus.com/bid/17993
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link VDB Entry
http://www.vupen.com/english/advisories/2006/1825
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
https://exchange.xforce.ibmcloud.com/vulnerabilities/26457
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory VDB Entry

12 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.0%
77th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

Affected Vendors

duware_dubanner_project