PT-2006-1756 · Imagevue · Imagevue

Publicado 2006-02-15 · Atualizado 2017-07-20 · CVE-2006-0702

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions imageVue version 16.1

Description The issue in imageVue allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. This might be due to directory traversal, although the specific vulnerability type cannot be determined due to the lack of details.

Recommendations For imageVue version 16.1, consider restricting access to the admin/upload.php file until a patch is available, and avoid using the path parameter with .. (dot dot) sequences to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-0702

Produtos afetados

Imagevue

Referências · 7

• 🔥 https://exploit-db.com/exploits/27200 · Exploit
• 🔥 http://secunia.com/advisories/18802 · Exploit
• 🔥 http://securityfocus.com/bid/16594 · Exploit
• 🔥 http://securityfocus.com/archive/1/424745/30/0/threaded · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24633 · Nota
• http://vupen.com/english/advisories/2006/0570 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0702 · Nota de Segurança