Design/Logic Flaw

2007-08-1321:17:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

Low

0.025 Low

EPSS

Percentile

90.2%

JSON

pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote directory tree via a URL in the root parameter. NOTE: this can be leveraged for traffic amplification or other denial of service.

CPENameOperatorVersion
pixlieeq1.7

CPE	Name	Operator	Version
	pixlie	eq	1.7

References

www.exploit-db.com/exploits/4278