CVE-2022-28590

CVE-2022-28590 原始发现和手动PoC来自 tuando243： Pixelimity 1.0 中通过 admin/admin-ajax.php?action=installtheme 存在一个远程代码执行（RCE）漏洞。 此PoC上传一个简单的webshell以便进一步远程代码执行。该利用程序要求服务器允许 system 函数，否则必须事先进行一些侦察以检测除了system之外哪些函数允许执行。 安装 root@kitploit: git clone https://github.com/jcarabantes/CVE-2022-28590.git python -m ve...

EUVD-2021-15702

Malware in sbrugna...

EUVD-2018-11591

Malware in sbrugna...

EUVD-2020-16266

Malware in sbrugna...

EUVD-2022-33031

Malicious code in bioql PyPI...

EUVD-2021-29821

Malicious code in bioql PyPI...

EUVD-2025-28403

Malicious code in bioql PyPI...

CVE-2025-5206

A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php of the component Installation. The manipulation of the argument sitedescription leads to sql injection. The attack can be launched remotely...

CVE-2025-5206 Pixelimity Installation index.php sql injection

A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php of the component Installation. The manipulation of the argument sitedescription leads to sql injection. The attack can be launched remotely...

CVE-2025-5206 Pixelimity Installation index.php sql injection

A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php of the component Installation. The manipulation of the argument sitedescription leads to sql injection. The attack can be launched remotely...

CVE-2025-5206

CVE-2025-5206 affects Pixelimity 1.0, specifically the Installation component's /install/index.php. The vulnerability arises from manipulating the site_description argument, causing SQL injection. It is remotely exploitable and has been disclosed publicly. Exploitation details are corroborated ac...

CVE-2025-5206 Pixelimity Installation index.php sql injection

A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php of the component Installation. The manipulation of the argument sitedescription leads to sql injection. The attack can be launched remotely...

pixelimity 注入漏洞

pixelimity is pixelimity open source a content management system . pixelimity 1.0 version of an injection vulnerability , the vulnerability stems from the file /install/index.php parameter sitedescription in the wrong operation leads to SQL injection...

PT-2025-22936 · Unknown · Pixelimity

Name of the Vulnerable Software and Affected Versions: Pixelimity version 1.0 Description: A critical issue was found in the Installation component, specifically in the /install/index.php file. The manipulation of the site description argument leads to SQL injection. This issue can be exploited...

CVE-2022-28589

A stored cross-site scripting XSS vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title field in admin/pages.php?action=addnew...

CVE-2022-28590

A Remote Code Execution RCE vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=installtheme...

CVE-2021-29056

Cross Site Scripting XSS vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php...

CVE-2020-23522

Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data Password parameter...

CVE-2018-19919

Pixelimity 1.0 has Persistent XSS via the admin/portfolio.php datatitle parameter, as demonstrated by a crafted onload attribute of an SVG element...

Pixelimity Arbitrary File Upload (CVE-2022-28590)

An arbitrary file upload vulnerability exists in Pixelimity. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...