VULNERABILITY INTELLIGENCE

CVE-2006-2530

CVSS score5 NONE
EPSS probability1.65%
CISA KEVNot currently listed
Published2006-05-22
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

avatar_upload.asp in Avatar MOD 1.3 for Snitz Forums 3.4, and possibly other versions, allows remote attackers to bypass file type checks and upload arbitrary files via a null byte in the file name, as discovered by the Codescan product.

Weakness classification

  • nvd@nist.gov: CWE-264

Primary references