Skip to content
Threat Feed
Subscribe

Tag

Cve-2019-25709

1 brief RSS
critical advisory

CF Image Hosting Script 1.6.5 Unauthenticated Database Download and Remote Image Deletion

CF Image Hosting Script 1.6.5 allows unauthenticated attackers to download the application database, extract delete IDs, and delete all pictures via the `d` parameter.

CF Image Hosting Script cve-2019-25709 image-hosting unauthorized-access
2r 2t 1c