TI-2006-02364 CVE-2006-2428 · GHSA-q253-pp4f-vcfradd.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by…Priority MEDIUM 40add.asp in DUware DUbanner 3.1 allows remote attackers to execute arbitrary code by uploading files with arbitrary extensions, such as ASP files, probably due to client-side enforcement that can be bypassed.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03956 · Published 2006-05-17 · No fix listed CWE-434