medium5.0Public exploit code
CVE-2006-0700
imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders an…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ImageVue 0.16.1 - 'dir.php' Folder Permission Disclosure2006-02-11 · webapps · php · Verified
Impact
imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imagevue | Imagevue | Version 0.16.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18802
- http://www.securityfocus.com/archive/1/424745/30/0/threaded
- http://www.securityfocus.com/bid/16594
- http://www.vupen.com/english/advisories/2006/0570
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24641
- http://secunia.com/advisories/18802
- http://www.securityfocus.com/archive/1/424745/30/0/threaded
- http://www.securityfocus.com/bid/16594
- http://www.vupen.com/english/advisories/2006/0570
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24641