CVE-2020-6757

contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows authenticated attackers to remotely execute code via the name parameter...

CVE-2020-6758

A cross-site scripting XSS vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parameter...

Rasilient PixelStor 5000 Remote Code Execution Vulnerability

The Rasilient PixelStor 5000 is a low-cost, high-bandwidth and high-availability RAID disk array. A remote code execution vulnerability exists in the contentHostProperties.php file in the Rasilient PixelStor 5000 K: 4.0.1580-20150629 KDI version release, which can be exploited by an attacker to...