CVE-2018-0605: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2018-8962

Name of the Vulnerable Software and Affected Versions Pixelpost versions 1.7.3 and earlier Description The issue allows remote code execution via unspecified vectors. Recommendations For Pixelpost versions 1.7.3 and earlier, at the moment, there is no information about a newer version that contai...

PT-2018-8964

Name of the Vulnerable Software and Affected Versions Pixelpost versions 1.7.3 and earlier Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For Pixelpost versions 1.7.3 and earlier, at the moment, there is no information about a newer...

Multiple vulnerabilities in Pixelpost

Overview Pixelpost provided by Pixelpost.org contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0604 Cross-site scripting CWE-79 - CVE-2018-0605 SQL injection CWE-89 - CVE-2018-0606 ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the...

JVN#27978559: Multiple vulnerabilities in Pixelpost

Pixelpost provided by Pixelpost.org contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0604 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L| Base Score: 4.7 CVSS v2| AV:N/AC:L/Au:S/C:P/I:P/A:P| Base Score: 6.5 Cross-site...

Pixelpost Cross-Site Scripting Vulnerability

Pixelpost is a suite of extensible open source photo-sharing applications with multi-language support. A cross-site scripting vulnerability exists in Pixelpost 1.7.3 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Pixelpost SQL Injection Vulnerability

Pixelpost is a suite of extensible open source photo-sharing applications with multi-language support. A SQL injection vulnerability exists in Pixelpost 1.7.3 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

Pixelpost Arbitrary Code Execution Vulnerability

Pixelpost is a suite of extensible open source photo-sharing applications with multi-language support. A security vulnerability exists in Pixelpost 1.7.3 and earlier versions. A remote attacker can exploit the vulnerability to execute code...

pixelpost 1.7.3 - Multiple Vulnerabilities

No description provided by source. 1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested on: WinX...

Pixelpost 1.7.3 - Multiple POST Variables SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------------------- Pixelpost 1.7.3 Multiple POST Variables SQL Injection Vulnerability Vendor: Pixelpost.org Product web page: http://www.pixelpost.org Affected version: 1.7.3 Summary: Pixelpost is an open-source...

Pixelpost 1.4.3 User Comment HTML Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16362/info Pixelpost is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content...

Pixelpost 1.7.3 Cross Site Scripting

Exploit Title: pixelpost 1.7.3 Cross Site Scripting Vulnerabilities Date: 06/03/2013 Author: Nikhalesh Singh Bhadoria Twitter: @nikhaleshsingh Download Link:http://www.pixelpost.org/ Versions Affected: pixelpost 1.7.3 Category:Xss...

CVE-2011-3792

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

Information disclosure

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

PT-2011-4682

Name of the Vulnerable Software and Affected Versions Pixelpost version 1.7.3 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is achieved by accessing certain files, such as includes/functions feeds.php, which reveals the...

CVE-2011-3792

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

CVE-2011-3792

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

CVE-2011-3792: Exposure of Sensitive Information to an Unauthorized Actor

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

CVE-2011-3792

Pixelpost 1.7.3 is affected by an information-disclosure vulnerability where remote attackers can obtain the installation path by directly requesting a PHP file, revealing path in an error message (e.g., includes/functions_feeds.php and related files). The issue is documented across multiple sour...

CVE-2011-1100

Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 findfid, 2 id, 3 selectfcat, 4 selectfmon, or 5 selectftag parameter in an images action...