PT-2006-1756 · Imagevue · Imagevue

Published 2006-02-15 · Updated 2017-07-20 · CVE-2006-0702

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions imageVue version 16.1

Description The issue in imageVue allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. This might be due to directory traversal, although the specific vulnerability type cannot be determined due to the lack of details.

Recommendations For imageVue version 16.1, consider restricting access to the admin/upload.php file until a patch is available, and avoid using the path parameter with .. (dot dot) sequences to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2006-0702

Affected Products

Imagevue

References · 7

• 🔥 https://exploit-db.com/exploits/27200 · Exploit
• 🔥 http://secunia.com/advisories/18802 · Exploit
• 🔥 http://securityfocus.com/bid/16594 · Exploit
• 🔥 http://securityfocus.com/archive/1/424745/30/0/threaded · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0702 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24633 · Note
• http://vupen.com/english/advisories/2006/0570 · Note