CVE-2006-2428
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading...
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw source is vague.
Exploit likelihood
What each source reports
NVD Score used
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw source is vague.
- Record
CVE-2006-2428- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-434
- Updated
- 2026-11-02
CVE List No score
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw source is vague.
- Record
CVE-2006-2428- Updated
- 2026-11-02
EUVDEUVD-2006-2429 No score
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw source is vague.
- Record
EUVD-2006-2429- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q253-pp4f-vcfr No score
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading...
add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed. NOTE: some of these details are obtained from third party information, since the raw source is vague.
- Record
GHSA-q253-pp4f-vcfr- Weakness
- CWE-434
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2428 is a high vulnerability (CVSS 7.5) in Duware Dubanner Project Dubanner, published May 17, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.96%, the 90th percentile. No source names a fixed version.
References
secunia.com/advisories/20102
exchange.xforce.ibmcloud.com/vulnerabilities/26457
securityreason.com/securityalert/911
securityfocus.com/bid/17993
vupen.com/english/advisories/2006/1825
nvd.nist.gov/vuln/detail/CVE-2006-2428
github.com/advisories/GHSA-q253-pp4f-vcfr