146 matches found
CVE-2009-4900
pixelpost 1.7.1 has XSS...
CVE-2010-3305
Cross-site request forgery CSRF vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password...
CVE-2010-3305
Cross-site request forgery CSRF vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password...
CVE-2010-3305
Cross-site request forgery CSRF vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password...
CVE-2010-3305
This entry concerns CVE-2010-3305, a CSRF vulnerability in Pixelpost 1.7.3 that could allow remote attackers to change the admin password. The connected documents confirm the affected software/version and the underlying issue (CSRF) with implications for admin credentials. The provided materials ...
pixelpost cross-site scripting vulnerability (CNVD-2019-39941)
pixelpost is a set of PHP and MySQL based , scalable open source photo blog application . A cross-site scripting vulnerability exists in pixelpost version 1.7.1-5, which stems from a lack of proper validation of client-side data in the WEB application and can be exploited by an attacker to execut...
pixelpost SQL injection vulnerability (CNVD-2019-39945)
pixelpost is a set of PHP and MySQL based , scalable open source photo blog application . A SQL injection vulnerability exists in pixelpost version 1.7.1-5, which stems from a lack of validation of externally-entered SQL statements in the database-based application and can be exploited by an...
CVE-2009-4899
pixelpost 1.7.1 has SQL injection...
CVE-2009-4900
pixelpost 1.7.1 has XSS...
CVE-2009-4899
pixelpost 1.7.1 has SQL injection...
Cross site scripting
pixelpost 1.7.1 has XSS...
Sql injection
pixelpost 1.7.1 has SQL injection...
CVE-2009-4900
pixelpost 1.7.1 has XSS...
CVE-2009-4900
Pixelpost 1.7.1 is affected by an XSS vulnerability caused by insufficient validation of client-side data in the web application. The issue is documented across multiple sources (e.g., CVE-2009-4900, CNVD-2019-39941, Red Hat advisories, Ubuntu CVE page) as a cross-site scripting flaw in the WEB i...
CVE-2009-4900
pixelpost 1.7.1 has XSS...
CVE-2009-4899
The CVE-2009-4899 entry concerns pixelpost 1.7.1 (and related 1.7.1-5 per CNVD) with a SQL injection vulnerability. The root cause is a lack of validation of externally entered SQL statements in the PHP/MySQL-based application, allowing an attacker to execute arbitrary SQL commands. Impact indica...
CVE-2009-4899
pixelpost 1.7.1 has SQL injection...
