Pixie cross-site scripting vulnerability (CNVD-2017-04894)

Pixie is an open source lightweight website content management system CMS. The system supports CSS themes, WYSIWYG editors and more. A cross-site scripting vulnerability exists in Pixie version 1.0.4. As the program fails to properly validate user-submitted input. A remote attacker can exploit th...

Pixie cross-site scripting vulnerability (CNVD-2017-04816)

Pixie is an open source lightweight website content management system CMS. The system supports CSS themes, WYSIWYG editors and more. A cross-site scripting vulnerability exists in Pixie version 1.0.4. As the program fails to properly validate user-submitted input. A remote attacker can exploit th...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack...

CVE-2017-7363

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack...

CVE-2017-7360

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...

CVE-2017-7359

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack...

CVE-2017-7362

Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack...

CVE-2017-7360

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...

CVE-2017-7361

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack...

CVE-2017-7361

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack...

CVE-2017-7362

Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack...

CVE-2017-7363

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack...

Sql injection

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...

CVE-2017-7359

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack...

CVE-2017-7361

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack...

CVE-2017-7363

Pixie 1.0.4 is affected by a cross-site scripting (XSS) vulnerability in Pixie’s admin/index.php s=publish&m=module&x= flow. The root cause is improper validation of user-submitted input, enabling injection of arbitrary web script/HTML. Impact: potential for session hijacking or defacement as des...

CVE-2017-7360

CVE-2017-7360 affects Pixie 1.0.4. The connected documents identify a cross-site scripting vulnerability in the admin interface, specifically in the admin/index.php s=settings&x= parameter, indicating insufficient input validation in the settings handling path. The impact is an XSS where an attac...