📄 PivotX 3.0.0 RC 3 Command Injection

PivotX content management system versions up to and including 3.0.0-rc3 contain an authenticated remote code execution vulnerability that allows administrative users to modify PHP files directly through the web interface, leading to complete system compromise...

EUVD-2017-6434

Malware in sbrugna...

EUVD-2014-0380

Malware in sbrugna...

EUVD-2011-0784

Malware in sbrugna...

EUVD-2011-1051

Malware in sbrugna...

EUVD-2011-0787

Malware in sbrugna...

EUVD-2011-0786

Malware in sbrugna...

EUVD-2017-16575

Malware in sbrugna...

EUVD-2014-0379

Malware in sbrugna...

EUVD-2011-0785

Malware in sbrugna...

EUVD-2015-5413

Malware in sbrugna...

EUVD-2017-18267

Malware in sbrugna...

EUVD-2015-5414

Malware in sbrugna...

EUVD-2012-2267

Malware in sbrugna...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...

CVE-2025-52367

PivotX CMS 3.0.0 RC3 is affected by a Cross Site Scripting vulnerability in the title and subtitle fields that can lead to Remote Code Execution. The root cause, per exploit reports, is unsanitized data stored during page creation via PHP serialize in modules/pages_flat.php, with the vulnerabilit...

CVE-2025-52367

Cross Site Scripting vulnerability in PivotX CMS v.3.0.0 RC 3 allows a remote attacker to execute arbitrary code via the subtitle field...