PT-2011-2622

Name of the Vulnerable Software and Affected Versions PivotX versions prior to 2.2.3 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. This is achieved via the image parameter in the pivotx/modules/module image.php file. Recommendations For...

PT-2011-2624

Name of the Vulnerable Software and Affected Versions PivotX version 2.2.2 Description The issue allows remote attackers to obtain sensitive information via a non-existent file in the image parameter. This is achieved by exploiting the pivotx/modules/module image.php file, which reveals the...