PT-2006-1757 · Imagevue · Imagevue

Zjieb · Published 2006-02-15 · Updated 2018-10-19 · CVE-2006-0703

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions imageVue version 16.1

Description The issue is likely a cross-site scripting (XSS) vulnerability. It involves the query string not being properly quoted when inserted into style and body tags. This can be demonstrated using the bgcol parameter in the query string.

Recommendations For imageVue version 16.1, consider disabling the vulnerable functionality in index.php until a patch is available. Restrict access to the index.php file to minimize the risk of exploitation. Avoid using the bgcol parameter in the query string until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-0703

Affected Products

Imagevue

References · 10

• 🔥 https://exploit-db.com/exploits/27199 · Exploit
• 🔥 http://securityfocus.com/archive/1/424745/30/0/threaded · Exploit
• 🔥 http://secunia.com/advisories/18802 · Exploit
• 🔥 http://securityfocus.com/bid/16594 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-0703 · Security Note
• http://securityreason.com/securityalert/429 · Note
• http://vupen.com/english/advisories/2006/0570 · Note
• http://securityfocus.com/archive/1/450047/100/100/threaded · Note
• http://securityfocus.com/archive/1/440586/100/100/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24642 · Note