PT-2006-1757 · Imagevue · Imagevue

Zjieb · Publicado 2006-02-15 · Atualizado 2018-10-19 · CVE-2006-0703

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions imageVue version 16.1

Description The issue is likely a cross-site scripting (XSS) vulnerability. It involves the query string not being properly quoted when inserted into style and body tags. This can be demonstrated using the bgcol parameter in the query string.

Recommendations For imageVue version 16.1, consider disabling the vulnerable functionality in index.php until a patch is available. Restrict access to the index.php file to minimize the risk of exploitation. Avoid using the bgcol parameter in the query string until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-0703

Produtos afetados

Imagevue

Referências · 10

• 🔥 https://exploit-db.com/exploits/27199 · Exploit
• 🔥 http://securityfocus.com/archive/1/424745/30/0/threaded · Exploit
• 🔥 http://secunia.com/advisories/18802 · Exploit
• 🔥 http://securityfocus.com/bid/16594 · Exploit
• http://securityreason.com/securityalert/429 · Nota
• http://vupen.com/english/advisories/2006/0570 · Nota
• http://securityfocus.com/archive/1/450047/100/100/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-0703 · Nota de Segurança
• http://securityfocus.com/archive/1/440586/100/100/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24642 · Nota