VulnerabilityModified
CVE-2008-4549
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the…
LOW 2.6EPSS 6.62%
Does this matter?
Lower severity and a low EPSS score (6.62%). Track it; it rarely justifies an emergency change on its own.
Description
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
- CVSS 2.0
- 2.6 LOWAV:N/AC:H/Au:N/C:P/I:N/A:N
- EPSS
- 6.62% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-20
- Affected
- imageshack/imageshack toolbar
- Source
- cve@mitre.org
References
- http://osvdb.org/40628
- http://secunia.com/advisories/28644Vendor Advisory
- http://securityreason.com/securityalert/4410
- http://www.securityfocus.com/archive/1/486941/100/200/threaded
- http://www.securityfocus.com/bid/27439
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39921
- https://www.exploit-db.com/exploits/4981
- http://osvdb.org/40628
- http://secunia.com/advisories/28644Vendor Advisory
- http://securityreason.com/securityalert/4410
- http://www.securityfocus.com/archive/1/486941/100/200/threaded
- http://www.securityfocus.com/bid/27439
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39921
- https://www.exploit-db.com/exploits/4981
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.