Vulnerability in Imagevue

CVE-2006-0700

imageVue 16.1 allows remote attackers to obtain folder permission settings via a direct request to dir.php, which returns an XML document that lists folders and their permissions.

EPSS: 0.065 (93.1th percentile) — read the EPSS interpretation.

Affected products

  • Imagevue — versions 0.16.1
  • N/a — versions n/a

Weakness classification (CWE)

References