medium5.0Public exploit code
CVE-2006-0702
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ImageVue 0.16.1 - 'upload.php' Unrestricted Arbitrary File Upload2006-02-11 · webapps · php · Verified
Impact
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. NOTE: due to the lack of details, the specific vulnerability type cannot be determined, although it might be due to directory traversal.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Imagevue | Imagevue | Version 0.16.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/18802
- http://www.securityfocus.com/archive/1/424745/30/0/threaded
- http://www.securityfocus.com/bid/16594
- http://www.vupen.com/english/advisories/2006/0570
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24633
- http://secunia.com/advisories/18802
- http://www.securityfocus.com/archive/1/424745/30/0/threaded
- http://www.securityfocus.com/bid/16594
- http://www.vupen.com/english/advisories/2006/0570
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24633