CVE-2006-0702: Imagevue

Medium severity, CVSS 5.0. EPSS: 7.3% chance of exploitation in the next 30 days.

admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. NOTE: due to the lack of details, the specific vulnerability type cannot be determined, although it might be due to directory traversal.

Affected products

• Imagevue Imagevue: version 0.16.1 only

Published 2006-02-15. Last modified 2026-06-16.