Lucene search
HistoryFeb 15, 2006 - 11:06 a.m.
CVE-2006-0702
nvd
cve
admin
upload.php
imagevue 16.1
remote attackers
arbitrary files
allowed folders
directory traversal
vulnerability
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.052 Low
EPSS
Percentile
93.0%
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via … (dot dot) sequences in the path parameter. NOTE: due to the lack of details, the specific vulnerability type cannot be determined, although it might be due to directory traversal.
Affected configurations
Node
imagevueimagevueMatch0.16.1
| CPE | Name | Operator | Version |
|---|---|---|---|
| imagevue:imagevue | imagevue | eq | 0.16.1 |
Related
cvelist
cvelist
CVE-2006-0702
2006-02-15 11:00:00
nvd
nvd
CVE-2006-0702
2006-02-15 11:06:00
nessus
nessus
imageVue < 16.2 admin/upload.php Unrestricted File Upload
2006-03-03 00:00:00
prion
prion
Directory traversal
2006-02-15 11:06:00
6.8 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.052 Low
EPSS
Percentile
93.0%
Related for CVE-2006-0702