| Package | Affected versions | Patched versions |
|---|---|---|
| imagevue | = 0.16.1 |
admin/upload.php in imageVue 16.1 allows remote attackers to upload arbitrary files to certain allowed folders via .. (dot dot) sequences in the path parameter. NOTE: due to the lack of details, the specific vulnerability type cannot be determined, although it might be due to directory traversal.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free