CVE-2006-1704: Hubert Plisson Sire

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Sire 2.0 nws allows remote attackers to upload arbitrary image files without authentication via a direct request to upload.php.

Affected products

Published 2006-04-11. Last modified 2026-06-16.