CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0605

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0605

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

Remote code execution

Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0604

Pixelpost v1.7.3 and earlier has an Arbitrary Code Execution vulnerability (CVE-2018-0604). Official records confirm remote code execution via unspecified vectors. The affected product is Pixelpost (versions up to 1.7.3). Several related sources/records (NVD, JVN, CNVD, CVE lists) consistently re...

CVE-2018-0604

Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors...

CVE-2018-0605

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0606

Pixelpost v1.7.3 and earlier is vulnerable to a SQL injection (CWE-89). The flaw allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Affected product is Pixelpost versions ≤1.7.3; root cause/vectors are not detailed in the provided documents. Mitigatio...

CVE-2018-0605

Pixelpost v1.7.3 and earlier is affected by a Cross‑site Scripting (CWE-79) vulnerability (CVE-2018-0605). The issue allows an unauthenticated remote attacker to inject arbitrary web script or HTML that could run in the context of an affected user’s browser. The connected sources consistently ide...

CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

Multiple vulnerabilities in Pixelpost

Overview Pixelpost provided by Pixelpost.org contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0604 Cross-site scripting CWE-79 - CVE-2018-0605 SQL injection CWE-89 - CVE-2018-0606 ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the...

Pixelpost Arbitrary Code Execution Vulnerability

Pixelpost is a suite of extensible open source photo-sharing applications with multi-language support. A security vulnerability exists in Pixelpost 1.7.3 and earlier versions. A remote attacker can exploit the vulnerability to execute code...

Pixelpost Cross-Site Scripting Vulnerability

Pixelpost is a suite of extensible open source photo-sharing applications with multi-language support. A cross-site scripting vulnerability exists in Pixelpost 1.7.3 and earlier versions. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML...

Pixelpost SQL Injection Vulnerability

Pixelpost is a suite of extensible open source photo-sharing applications with multi-language support. A SQL injection vulnerability exists in Pixelpost 1.7.3 and earlier versions. A remote attacker can exploit this vulnerability to execute arbitrary SQL commands...

JVN#27978559: Multiple vulnerabilities in Pixelpost

Pixelpost provided by Pixelpost.org contains multiple vulnerabilities listed below. Arbitrary code execution - CVE-2018-0604 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L| Base Score: 4.7 CVSS v2| AV:N/AC:L/Au:S/C:P/I:P/A:P| Base Score: 6.5 Cross-site...

pixelpost 1.7.3 - Multiple Vulnerabilities

No description provided by source. 1 +Exploit Title: pixelpostv1.7.3 Multiple vulnerabilities 0 0 +Date: 15/09/2010 1 1 +Author: Sweet 0 0 +Contact : [email protected] 0 1 +Software Link: http://www.pixelpost.org/ 0 0 +Download: http://www.pixelpost.org/ 1 1 +Version: 1.7.3 0 0 +Tested on: WinX...

Pixelpost 1.7.3 - Multiple POST Variables SQL Injection Vulnerability

No description provided by source. -------------------------------------------------------------------- Pixelpost 1.7.3 Multiple POST Variables SQL Injection Vulnerability Vendor: Pixelpost.org Product web page: http://www.pixelpost.org Affected version: 1.7.3 Summary: Pixelpost is an open-source...