Imagevue

imagevue

5 CVEs • 1 product

Products (1)

Click to collapse

Toggle

CVEs (5)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2008-1273 1Imagevue 1Imagevue Apr 23, 2026 Mar 10, 2008 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4)...Show more Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4) dirxml.php in upload/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.Show less
CVE-2006-0703 1Imagevue 1Imagevue Apr 16, 2026 Feb 15, 2006 N/A· v4 N/A· v3 4.3 MEDIUM· v2 Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as dem...Show more Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parameter.Show less
CVE-2006-0702 1Imagevue 1Imagevue Apr 16, 2026 Feb 15, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. NOTE: due to the lack of details, the specific vulnerabili...Show more admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. NOTE: due to the lack of details, the specific vulnerability type cannot be determined, although it might be due to directory traversal.Show less
CVE-2006-0701 1Imagevue 1Imagevue Apr 16, 2026 Feb 15, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
CVE-2006-0700 1Imagevue 1Imagevue Apr 16, 2026 Feb 15, 2006 N/A· v4 N/A· v3 5.0 MEDIUM· v2 imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions.