cbcvebase.

Davidtavarez Cf Image Hosting Script vulnerabilities

1 known vulnerability affecting davidtavarez/cf_image_hosting_script.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2019-25709P2CRITICALCVSS 9.8v1.6.52026-04-12
CVE-2019-25709 [CRITICAL] CWE-552 CVE-2019-25709: CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the applicatio CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory. Attackers can extract delete IDs stored in plaintext from the deserialized database and use them to delete all pictures via the d parameter.
nvd
Davidtavarez Cf Image Hosting Script vulnerabilities | cvebase