📄 PivotX 3.0.0 RC 3 Command Injection

PivotX content management system versions up to and including 3.0.0-rc3 contain an authenticated remote code execution vulnerability that allows administrative users to modify PHP files directly through the web interface, leading to complete system compromise...

EUVD-2014-0380

Malware in sbrugna...

EUVD-2012-2267

Malware in sbrugna...

EUVD-2017-16575

Malware in sbrugna...

EUVD-2015-5414

Malware in sbrugna...

EUVD-2017-6434

Malware in sbrugna...

EUVD-2014-0379

Malware in sbrugna...

EUVD-2011-0784

Malware in sbrugna...

EUVD-2011-0785

Malware in sbrugna...

EUVD-2011-0787

Malware in sbrugna...

EUVD-2015-5413

Malware in sbrugna...

EUVD-2017-18267

Malware in sbrugna...

EUVD-2011-1051

Malware in sbrugna...

EUVD-2011-0786

Malware in sbrugna...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367

PivotX CMS version 3.0.0 RC 3 is vulnerable to a Stored Cross-Site Scripting (XSS) flaw within the title and subtitle fields during page creation. The root cause is a lack of input sanitization in the savePage($page) function in modules/pages_flat.php, where data is stored via saveSerialize() and...