4 matches found
EUVD-2015-5413
Malware in sbrugna...
EUVD-2014-0380
Malware in sbrugna...
Design/Logic Flaw
The smartyself function in modules/modulesmarty.php in PivotX 2.3.11 mishandles the URI, allowing XSS via vectors involving quotes in the self Smarty tag...
Design/Logic Flaw
PivotX 2.3.11 allows remote authenticated users to execute arbitrary PHP code via vectors involving an upload of a .htaccess file...