THREATIST.IORead the docs 5 records
Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4)…
Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as dem…
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via ..
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions.