VULNERABILITY INTELLIGENCE

CVE-2008-4549

CVSS score2.6 LOW
EPSS probability6.62%
CISA KEVNot currently listed
Published2008-10-14
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:N/A:N

Description

The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references