Vulnerabilities

TI-2019-15761 CVE-2019-25709 · GHSA-g3cq-f9xx-gc5g

CF Image Hosting Script 1.6.5 Unauthorized Database Access

MEDIUM 49

CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00607 Published 2026-04-12 No fix listed CWE-552

TI-2011-03938 CVE-2011-4572 · GHSA-qvff-2f5c-wmh7

Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting…

LOW 23

Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01526 Published 2011-11-29 No fix listed CWE-79

Vulnerabilities

Filters

CF Image Hosting Script 1.6.5 Unauthorized Database Access

Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting…