18802Third-party advisory
http://secunia.com/advisories/18802 CVE-2006-0701
ImageVue 0.16.1 - 'readfolder.php?path' Arbitrary Directory Listing
Record summary
CVE-2006-0701 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBImageVue 0.16.1 - 'readfolder.php?path' Arbitrary Directory ListingExploitDB exploitby zjiebNot analyzed1 file
References
620060211 imageVue16.1 upload vulnerabilitymailing list
http://www.securityfocus.com/archive/1/424745/30/0/threaded 16594vdb entry
http://www.securityfocus.com/bid/16594 ADV-2006-0570vdb entry
http://www.vupen.com/english/advisories/2006/0570 imagevue-multiple-information-disclosure(24641)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/24641 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-0701