CVE-2008-4549
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7,...
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
Exploit likelihood
What each source reports
NVD Score used
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
- Record
CVE-2008-4549- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:P/I:N/A:N - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
- Record
CVE-2008-4549- Updated
- 2026-11-02
EUVDEUVD-2008-4530 No score
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
- Record
EUVD-2008-4530- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gg8w-jxr4-7rcf No score
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7,...
The ImageShack Toolbar ActiveX control (ImageShackToolbar.dll) in ImageShack Toolbar 4.5.7, possibly including 4.5.7.69, allows remote attackers to force the upload of arbitrary image files to the ImageShack site via a file: URI argument to the BuildSlideShow method.
- Record
GHSA-gg8w-jxr4-7rcf- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | ImageShack Toolbar 4.5.7 - 'FileUploader' Class InsecureMethod | 2008-01-24 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-4549 is a low vulnerability (CVSS 2.6) in Imageshack Toolbar, published October 14, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.62%, the 93rd percentile. No source names a fixed version.
References
osvdb.org/40628
exploit-db.com/exploits/4981
secunia.com/advisories/28644
securityreason.com/securityalert/4410
securityfocus.com/archive/1/486941/100/200/threaded
exchange.xforce.ibmcloud.com/vulnerabilities/39921
nvd.nist.gov/vuln/detail/CVE-2008-4549
github.com/advisories/GHSA-gg8w-jxr4-7rcf