Unrated severityNVD Advisory· Published Mar 10, 2008· Updated Apr 23, 2026

CVE-2008-1273

Description

Multiple cross-site scripting (XSS) vulnerabilities in imageVue 1.7 allow remote attackers to inject arbitrary web script or HTML via the path parameter to (1) popup.php, (2) test/dir2.php, (3) admin/upload.php, and (4) dirxml.php in upload/. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Affected products

Imagevue/Imagevue
cpe:2.3:a:imagevue:imagevue:1.7:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

downloads.securityfocus.com/vulnerabilities/exploits/28138.htmlnvdExploit
www.securityfocus.com/bid/28138nvd
exchange.xforce.ibmcloud.com/vulnerabilities/41169nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000