CVE-2008-4549 The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the Ima...
LowCVSS 2.6
EPSS 6.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| imageshack toolbar | = 4.5.7 | No fix listed |
| imageshack toolbar | = 4.5.7.69 | No fix listed |
References
- 40628 vdb-entry
- 28644 third-party-advisory vendor-advisory
- 4410 third-party-advisory
- 20080124 ImageShack Toolbar FileUploader Class insecurities mailing-list
- 27439 vdb-entry
- toolbar-imageshacktoolbar-info-disclosure(39921) vdb-entry
- 4981 exploit