PT-2002-2446 · Php · Phpimageview

Published 2002-12-31 · Updated 2017-07-11 · CVE-2002-1724

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHPImageView version 1.0

Description A cross-site scripting issue exists, allowing remote attackers to execute arbitrary scripts as other users. This is achieved via the pic parameter in the phpimageview.php file.

Recommendations For PHPImageView version 1.0, consider restricting access to the phpimageview.php file until a patch is available, and avoid using the pic parameter in sensitive operations to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2002-1724

Affected Products

Phpimageview

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2002-1724 · Security Note
• http://ifrance.com/kitetoua/tuto/5holes4.txt · Vendor Advisory
• http://online.securityfocus.com/archive/82/270970 · Note
• http://securityfocus.com/bid/4668 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/9000 · Note