CVE-2006-6994: Indirmax.org Ozzywork Galeri

Medium severity, CVSS 6.4. EPSS: 2.2% chance of exploitation in the next 30 days.

Unrestricted file upload vulnerability in add.asp in OzzyWork Gallery, possibly 2.0 and earlier, allows remote attackers to upload and execute arbitrary ASP files by removing the client-side security checks.

Affected products

• Indirmax.org Ozzywork Galeri: up to and including 2.0

Published 2007-02-12. Last modified 2026-06-16.