GCVE - cpe:2.3:a:imagevue:imagevue:0.16.1:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:imagevue:imagevue:0.16.1:*:*:*:*:*:*:*

part: a version: 0.16.1 update: *

Vendor	Imagevue (`1288cec0-43cf-5c3c-a7fa-03f54c3c6e7d`)
Product	Imagevue (`e1d38dff-0e62-5101-bf20-f481e1e7bd84`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-0703`	vulnerable	2026-06-08 04:48:54.983454	Details available Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parameter. Published: 2006-02-15T11:00:00.000Z Updated: 2024-08-07T16:41:29.274Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0570 http://www.securityfocus.com/archive/1/450047/100/100/threaded http://www.securityfocus.com/archive/1/424745/30/0/threaded http://secunia.com/advisories/18802 http://www.securityfocus.com/archive/1/440586/100/100/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0702`	vulnerable	2026-06-08 04:48:54.983129	Details available admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. NOTE: due to the lack of details, the specific vulnerability type cannot be determined, although it might be due to directory traversal. Published: 2006-02-15T11:00:00.000Z Updated: 2024-08-07T16:41:29.191Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0570 https://exchange.xforce.ibmcloud.com/vulnerabilities/24633 http://www.securityfocus.com/archive/1/424745/30/0/threaded http://secunia.com/advisories/18802 http://www.securityfocus.com/bid/16594	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0701`	vulnerable	2026-06-08 04:48:54.982840	Details available readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters. Published: 2006-02-15T11:00:00.000Z Updated: 2024-08-07T16:41:29.188Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0570 http://www.securityfocus.com/archive/1/424745/30/0/threaded http://secunia.com/advisories/18802 http://www.securityfocus.com/bid/16594 https://exchange.xforce.ibmcloud.com/vulnerabilities/24641	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0700`	vulnerable	2026-06-08 04:48:54.982457	Details available imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions. Published: 2006-02-15T11:00:00.000Z Updated: 2024-08-07T16:41:29.192Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/0570 http://www.securityfocus.com/archive/1/424745/30/0/threaded http://secunia.com/advisories/18802 http://www.securityfocus.com/bid/16594 https://exchange.xforce.ibmcloud.com/vulnerabilities/24641	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Imagevue

Notes

PURL mappings

Vulnerability references

Contribute