Imagevue

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Imagevue records in CISA KEV

No Imagevue vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Imagevue 5 records LOW

Records

5 records

TI-2006-00681 CVE-2006-0702 · GHSA-hx74-56pv-vfr2

admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to…

LOW 33

admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via ..

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07268 Published 2006-02-15 No fix listed

TI-2006-00680 CVE-2006-0701 · GHSA-5rjx-jvqx-cv7m

readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.

LOW 33

readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07855 Published 2006-02-15 No fix listed

TI-2006-00679 CVE-2006-0700 · GHSA-pr87-7rf5-xq88

imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct…

LOW 32

imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.06683 Published 2006-02-15 No fix listed CWE-264

TI-2006-00682 CVE-2006-0703 · GHSA-hwx9-56xf-8w72

Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a…

LOW 27

Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as dem…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.04502 Published 2006-02-15 No fix listed

TI-2008-01223 CVE-2008-1273 · GHSA-hm6g-6c9j-353m

Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4)…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01476 Published 2008-03-10 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	5
Low	0
No CVSS	0