← Back

Codefuture

codefuture

2 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Cf Image Hosting Script
cf_image_hosting_script
1 CVE
Image Hosting Script
image_hosting_script
1 CVE

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2019-25709
1Codefuture
1Image Hosting Script
Jun 17, 2026
Apr 12, 2026
9.3 CRITICAL· v4
9.8 CRITICAL· v3
N/A· v2
CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory. Attackers can extract delete IDs stored in plain...Show more
CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory. Attackers can extract delete IDs stored in plaintext from the deserialized database and use them to delete all pictures via the d parameter.Show less
CVE-2011-4572
1Codefuture
1Cf Image Hosting Script
Apr 29, 2026
Nov 29, 2011
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q...Show more
Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure vulnerability, but this is likely inaccurate.Show less