CVE-2011-1035

PivotX is vulnerable to a password-reset data manipulation vulnerability (CVE-2011-1035) affecting version 2.2.3 and earlier; 2.2.4 is reported not affected. An attacker can change the password of arbitrary accounts via unspecified vectors, potentially gaining admin access and enabling file uploa...

CVE-2011-1035

The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors...

VulnCheck KEV: CVE-2011-1035

The password reset in PivotX before 2.2.4 allows remote attackers to modify the passwords of arbitrary users via unspecified vectors...

PivotX password reset vulnerability

Overview The PivotX web content management system 2.2.3 and earlier is affected by a password reset vulnerability. Description PivotX contains a vulnerability that allows an attacker to change the password of any account just by guessing the username. Version 2.2.4 has been reported to not be...

PivotX -- administrator password reset vulnerability

US CERT reports: PivotX contains a vulnerability that allows an attacker to change the password of any account just by guessing the username. Version 2.2.4 has been reported to not be affected. This vulnerability is being exploited in the wild and users should immediately upgrade to 2.2.5 or late...

PivotX < 2.3.2 Multiple XSS Vulnerabilities

PivotX is prone to multiple cross-site scripting XSS vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PivotX Detection (HTTP)

HTTP based detection of PivotX. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.801734";...

CVE-2011-0774

PivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 includes/ping.php and 2 includes/spamping.php, which reveals the installation path in an error message...

CVE-2011-0775

pivotx/modules/moduleimage.php in PivotX 2.2.2 allows remote attackers to obtain sensitive information via a non-existent file in the image parameter, which reveals the installation path in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2011-0772

Multiple cross-site scripting XSS vulnerabilities in PivotX 2.2.0, and possibly other versions before 2.2.2, allow remote attackers to inject arbitrary web script or HTML via the 1 color parameter to includes/blogroll.php or 2 src parameter to includes/timwrapper.php...

CVE-2011-0773

Cross-site scripting XSS vulnerability in pivotx/modules/moduleimage.php in PivotX before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the image parameter...

Information disclosure

pivotx/modules/moduleimage.php in PivotX 2.2.2 allows remote attackers to obtain sensitive information via a non-existent file in the image parameter, which reveals the installation path in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in PivotX 2.2.0, and possibly other versions before 2.2.2, allow remote attackers to inject arbitrary web script or HTML via the 1 color parameter to includes/blogroll.php or 2 src parameter to includes/timwrapper.php...

Cross site scripting

Cross-site scripting XSS vulnerability in pivotx/modules/moduleimage.php in PivotX before 2.2.3 allows remote attackers to inject arbitrary web script or HTML via the image parameter...

Information disclosure

PivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 includes/ping.php and 2 includes/spamping.php, which reveals the installation path in an error message...

CVE-2011-0774

PivotX before 2.2.2 allows remote attackers to obtain sensitive information via a direct request to 1 includes/ping.php and 2 includes/spamping.php, which reveals the installation path in an error message...

CVE-2011-0775

pivotx/modules/moduleimage.php in PivotX 2.2.2 allows remote attackers to obtain sensitive information via a non-existent file in the image parameter, which reveals the installation path in an error message. NOTE: the provenance of this information is unknown; the details are obtained solely from...

CVE-2011-0774

PivotX before 2.2.2 has an information-disclosure vulnerability: direct requests to includes/ping.php and includes/spamping.php reveal the installation path in an error message. Affected: PivotX (version prior to 2.2.2). Root cause: error messaging exposes installation path, enabling partial conf...

CVE-2011-0773

PivotX is vulnerable to a Cross-Site Scripting (XSS) flaw in the image parameter of pivotx/modules/module_image.php, affecting PivotX before 2.2.3. The root cause is insufficient sanitization of user-supplied data. The documented impact is remote injection of arbitrary script/HTML. Remediation: u...

CVE-2011-0775

PivotX 2.2.2 is affected by a vulnerability in pivotx/modules/module_image.php where an invalid image parameter triggers an error message that reveals the installation path, enabling information disclosure. The root cause is an error message disclosure when the image parameter references a non-ex...