CVE-2008-4549

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-10-14 · updated 2026-06-16
Weakness: CWE-20

Description

The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.

Affected products

Imageshack Toolbar: 4.5.7, 4.5.7.69

References

http://osvdb.org/40628
http://secunia.com/advisories/28644
http://securityreason.com/securityalert/4410
http://www.securityfocus.com/archive/1/486941/100/200/threaded
http://www.securityfocus.com/bid/27439
https://exchange.xforce.ibmcloud.com/vulnerabilities/39921
https://www.exploit-db.com/exploits/4981
http://osvdb.org/40628
http://secunia.com/advisories/28644
http://securityreason.com/securityalert/4410
http://www.securityfocus.com/archive/1/486941/100/200/threaded
http://www.securityfocus.com/bid/27439

Get alerted when CVE-2008-4549 or the next vulnerability affects your stack