EUVD-2011-3749

Malware in sbrugna...

EUVD-2011-1114

Malware in sbrugna...

CVE-2010-3305

Cross-site request forgery CSRF vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password...

CVE-2010-3305

Cross-site request forgery CSRF vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password...

CVE-2010-3305

This entry concerns CVE-2010-3305, a CSRF vulnerability in Pixelpost 1.7.3 that could allow remote attackers to change the admin password. The connected documents confirm the affected software/version and the underlying issue (CSRF) with implications for admin credentials. The provided materials ...

CVE-2010-3305

Cross-site request forgery CSRF vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password...

CVE-2011-3792

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

Information disclosure

Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functionsfeeds.php and certain other files...

Sql injection

Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 findfid, 2 id, 3 selectfcat, 4 selectfmon, or 5 selectftag parameter in an images action...

CVE-2011-1100

Pixelpost 1.7.3 is affected by multiple SQL injection flaws in admin/index.php triggered by POST parameters (findfid, id, selectfcat, selectfmon, selectftag). The underlying issue is insufficient input sanitization, allowing remote or authenticated attackers to manipulate queries and potentially ...

CVE-2011-1100

Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the 1 findfid, 2 id, 3 selectfcat, 4 selectfmon, or 5 selectftag parameter in an images action...

Pixelpost 1.7.3 Multiple POST Variables SQL Injection Vulnerability

Exploit for php platform in category web applications -------------------------------------------------------------------- Pixelpost 1.7.3 Multiple POST Variables SQL Injection Vulnerability Vendor: Pixelpost.org Product web page: http://www.pixelpost.org Affected version: 1.7.3 Summary: Pixelpos...