VULNERABILITY INTELLIGENCE

CVE-2006-6556

CVSS score7.5 HIGH
EPSS probability3.04%
CISA KEVNot currently listed
Published2006-12-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P

Description

The eyeHome function in apps/eyeHome.eyeapp/aplic.php in EyeOS before 0.9.3-3 allows remote attackers to upload and execute arbitrary code via dangerous file extensions that are not all lowercase, which bypasses a cleansing operation.

Primary references