Skip to content
OpenAdvisories

Product · Davidtavarez

CF Image Hosting Script

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2019-25709

    CF Image Hosting Script 1.6.5 Unauthorized Database Access

    CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory. Attackers can extract delete IDs stored in plaintext from the deserialized database and…

    Davidtavarez CF Image Hosting Script