CVE-2019-25709: Files or Directories Accessible to External Parties

CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory. Attackers can extract delete IDs stored in plaintext from the deserialized database and use them to delete all pictures via t...

EUVD-2011-4498

Malware in sbrugna...

CF Image Hosting Script 1.1 'upload.php' Arbitrary File Upload Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/39870/info CF Image Hosting Script is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary code and run ...

CF Image Hosting Script 1.3 (settings.cdb) Information Disclosure Vulnerability

No description provided by source. Title: CF Image Hosting script 1.3 settings.cdb Information Disclosure Vulnerability By: Dr.$audi Home: sa-virus.com Email: [email protected] Date: aug 29th 2010 Greez to: all sa-virus and v4-team members . Script: CF Image Hosting script v 1.3 HomePage:...

CVE-2011-4572

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

CVE-2011-4572

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

CVE-2011-4572

CVE-2011-4572: A cross-site scripting (XSS) vulnerability exists in inc/tesmodrewite.php of CF Image Hosting Script versions 1.3.82 and 1.4.1 (and likely earlier versions before 1.4.2). The issue allows remote attackers to inject arbitrary JavaScript/HTML via the q parameter. The entry notes this...

CVE-2011-4572: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

CF Image Hosting Script 1.3 Database Disclosure

Title: CF Image Hosting script 1.3 settings.cdb Information Disclosure Vulnerability By: Dr.$audi Home: sa-virus.com Email: [email protected] Date: aug 29th 2010 Greez to: all sa-virus and v4-team members . Script: CF Image Hosting script v 1.3 HomePage: www.codefuture.co.uk/projects/imagehost1.3/...

CF Image Hosting Script 1.3 (settings.cdb) Information Disclosure

Exploit for php platform in category web applications ================================================================= CF Image Hosting Script 1.3 settings.cdb Information Disclosure ================================================================= Title: CF Image Hosting script 1.3 settings.cdb...

CF Image Hosting Script 1.3 - 'settings.cdb' Information Disclosure

Title: CF Image Hosting script 1.3 settings.cdb Information Disclosure Vulnerability By: Dr.$audi Home: sa-virus.com Email: [email protected] Date: aug 29th 2010 Greez to: all sa-virus and v4-team members . Script: CF Image Hosting script v 1.3 HomePage: www.codefuture.co.uk/projects/imagehost1.3/...

CF Image Hosting Script 1.3 - settings.cdb Information Disclosure

CF Image Hosting Script 1.3 - settings.cdb Information Disclosure Title: CF Image Hosting script 1.3 settings.cdb Information Disclosure Vulnerability By: Dr.$audi Home: sa-virus.com Email: [email protected] Date: aug 29th 2010 Greez to: all sa-virus and v4-team members . Script: CF Image Hosting...

CF Image Hosting Script 1.1 - upload.php Arbitrary File Upload

CF Image Hosting Script 1.1 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/39870/info CF Image Hosting Script is prone to an arbitrary-file-upload vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to...

CF Image Hosting Script v1.0 File Disclosure Vulnerability

Exploit for php platform in category web applications ========================================================== CF Image Hosting Script v1.0 File Disclosure Vulnerability ========================================================== |=-----------------------------------------------------=|...