18802Third-party advisory
http://secunia.com/advisories/18802 CVE-2006-0703
ImageVue 0.16.1 - 'index.php?bgcol' Cross-Site Scripting
Record summary
CVE-2006-0703 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Unspecified vulnerability in index.php in imageVue 16.1 has unknown impact, probably a cross-site scripting (XSS) vulnerability involving the query string that is not quoted when inserted into style and body tags, as demonstrated using a bgcol parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBImageVue 0.16.1 - 'index.php?bgcol' Cross-Site ScriptingExploitDB exploitby zjiebNot analyzed1 file
References
9429Third-party advisory
http://securityreason.com/securityalert/429 20060211 imageVue16.1 upload vulnerabilitymailing list
http://www.securityfocus.com/archive/1/424745/30/0/threaded 20060719 Re: imageVue16.1 upload vulnerabilitymailing list
http://www.securityfocus.com/archive/1/440586/100/100/threaded 20061029 Re: imageVue16.1 upload vulnerabilitymailing list
http://www.securityfocus.com/archive/1/450047/100/100/threaded 16594vdb entry
http://www.securityfocus.com/bid/16594 ADV-2006-0570vdb entry
http://www.vupen.com/english/advisories/2006/0570 imagevue-index-sql-injection(24642)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/24642 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2006-0703