Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.0
CVE-2006-0701: imageVue 16.1 allows remote directory listing
CVE-2006-0701 · published 20 years ago
Summary
The readfolder.php script in imageVue version 16.1 can be tricked into revealing the contents of folders on the server. An attacker can modify the path and file type parameters to see files that should be hidden. Update to a patched version or apply the vendor’s recommended configuration changes to block this behavior.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| imagevue | imagevue |
0.16.1 cpe:2.3:a:imagevue:imagevue:0.16.1:*:*:*:*:*:*:* |
Original advisory text
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
readfolder.php in imageVue 16.1 allows remote attackers to list directories via modified path and ext parameters.
References
- http://secunia.com/advisories/18802 Exploit Vendor Advisory
- http://www.securityfocus.com/archive/1/424745/30/0/threaded Exploit Vendor Advisory
- http://www.securityfocus.com/bid/16594 Exploit
- http://www.vupen.com/english/advisories/2006/0570
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24641
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Severity
5.0
Medium
Timeline
Published15 Feb 2006
Updated15 Oct 2026
First seen29 Sep 2026
Sources
CVE-2006-0701 · NVD
Track software like this
Free during beta