Published: 29/11/2011 Updated: 29/08/2017

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions prior to 1.4.2 allows remote malicious users to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure vulnerability, but this is likely inaccurate.

Vulnerable Product	Search on Vulmon	Subscribe to Product
codefuture cf image hosting script 1.4.1
codefuture cf image hosting script 1.3.82

#!/usr/bin/perl #CF Image Hosting Script 1382 File Disclosure Exploit #Bugfounder and Exploitcoder: bd0rk #Contact: wwwsohcrewschool-of-hacknet #eMail: bd0rk[at]hackermailcom #Affected-Software: CF Image Hosting Script 1382 #Vendor: wwwphpkodecom #Download: phpkodecom/download/p/CF_Image_Hosting_v13zip #Vulnerable Code ...

CWE-79 http://osvdb.org/76059 http://packetstormsecurity.org/files/view/105524/cfimagehosting1382-disclose.txt http://www.exploit-db.com/exploits/17927 http://secunia.com/advisories/46290 https://exchange.xforce.ibmcloud.com/vulnerabilities/70347 https://nvd.nist.gov https://www.exploit-db.com/exploits/17927/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-4572

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect