VULHUB ™

PHPImageView 1.0 is a simple image display system. It is vulnerable to cross site scripting whereby a user supplied variable is returned as the content of an error message, allowing script submitted as a URL to be interpreted by the browser. In addition to this, phpinfo() can be invoked - revealing a detailed summary of operating system setup including file system structure and version information.

PHPImageView 1.0 is a simple image display system. It is vulnerable to cross site scripting whereby a user supplied variable is returned as the content of an error message, allowing script submitted as a URL to be interpreted by the browser. In addition to this, phpinfo() can be invoked - revealing a detailed summary of operating system setup including file system structure and version information.