Back to CVE Browser

CVE-2008-4549

LOW

2.6

CVSS Severity Score

EPSS Score0.1460%

EPSS Percentile15.84th

PublishedOct 14, 2008

Last ModifiedApr 23, 2026

Vulnerability Description

The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.

Affected Platforms (CPE)

📦

Imageshack

Imageshack Toolbar

= 4.5.7

📦

Imageshack

Imageshack Toolbar

= 4.5.7.69

References & Advisories

🔗 http://osvdb.org/40628

🔗 http://secunia.com/advisories/28644

🔗 http://securityreason.com/securityalert/4410

🔗 http://www.securityfocus.com/archive/1/486941/100/200/threaded

🔗 http://www.securityfocus.com/bid/27439

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/39921

🔗 https://www.exploit-db.com/exploits/4981

🔗 http://osvdb.org/40628

Related Vulnerabilities

CVE-2008-034010.0

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5 FIPS+, 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 have unknown imp...

CVE-2008-665110.0

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP c...

CVE-2008-033910.0

Unspecified vulnerability in the XML DB component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 has unknown impact...

CVE-2008-034110.0

Unspecified vulnerability in the Advanced Queuing component in Oracle Database 9.0.1.5 FIPS+ and 10.1.0.5 has unknown impact and r...