CVE Intelligence

Davidtavarez CF Image Hosting Script vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Davidtavarez CF Image Hosting Script: 1 record(s), with affected versions and fixes.

CVE-2019-25709 Critical · 9.8 CWE-552 Apr 12, 2026
CF Image Hosting Script 1.6.5 Unauthorized Database Access
CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download and decode the application database by accessing the imgdb.db file in the upload/data directory. Attackers can extract delete IDs stored in plaintext from the deserialized database and use them to delete all pictures via the d parameter.