CVE-2006-0695: Ansilove

High severity, CVSS 7.5. EPSS: 2.8% chance of exploitation in the next 30 days.

Ansilove before 1.03 does not filter uploaded file extensions, which allows remote attackers to execute arbitrary code by uploading arbitrary files with dangerous extensions, then accessing them directly in the upload directory.

Affected products

• Ansilove Ansilove: version 1.01 only; version 1.02 only

Published 2006-02-15. Last modified 2026-06-16.