Skip to content
Noroxi

imagevue records

5 published records for vendor imagevue.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    5 records
    • CVE-2006-0701
      22Monitor

      readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.

      MediumCVSS 5.0Proof of conceptEPSS 7%

      imagevue · imagevueFeb 15, 2006

    • CVE-2006-0702
      22Monitor

      admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via ..

      MediumCVSS 5.0Proof of conceptEPSS 7%

      imagevue · imagevueFeb 15, 2006

    • CVE-2006-0700
      22Monitor

      imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document th

      MediumCVSS 5.0Proof of conceptEPSS 6%

      imagevue · imagevueFeb 15, 2006

    • CVE-2006-0703
      18Monitor

      Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving th

      MediumCVSS 4.3Proof of conceptEPSS 4%

      imagevue · imagevueFeb 15, 2006

    • CVE-2008-1273
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the pa

      MediumCVSS 4.3Proof of conceptEPSS 1%

      imagevue · imagevueMar 10, 2008