FreeBSD Ports: pivotx

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2011-1035

PivotX is vulnerable to a password-reset data manipulation vulnerability (CVE-2011-1035) affecting version 2.2.3 and earlier; 2.2.4 is reported not affected. An attacker can change the password of arbitrary accounts via unspecified vectors, potentially gaining admin access and enabling file uploa...

PivotX password reset vulnerability

Overview The PivotX web content management system 2.2.3 and earlier is affected by a password reset vulnerability. Description PivotX contains a vulnerability that allows an attacker to change the password of any account just by guessing the username. Version 2.2.4 has been reported to not be...