CVE-2018-0604

Pixelpost v1.7.3 and earlier has an Arbitrary Code Execution vulnerability (CVE-2018-0604). Official records confirm remote code execution via unspecified vectors. The affected product is Pixelpost (versions up to 1.7.3). Several related sources/records (NVD, JVN, CNVD, CVE lists) consistently re...

JVN#27978559: Multiple vulnerabilities in Pixelpost

Pixelpost provided by Pixelpost.org contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0604 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L| Base Score: 4.7 CVSS v2| AV:N/AC:L/Au:S/C:P/I:P/A:P| Base Score: 6.5 Cross-site...