PT-2019-6510

Name of the Vulnerable Software and Affected Versions pixelpost versions 1.7.1 through 1.7.1-5 Description The issue is related to Cross-Site Scripting XSS. XSS is a type of security vulnerability that allows an attacker to inject malicious scripts into a website, potentially allowing them to ste...

PT-2019-6509

Name of the Vulnerable Software and Affected Versions pixelpost versions 1.7.1 through 1.7.5 Description The issue is related to SQL injection. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this...

CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0605

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0604

Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors...

CVE-2018-0604

Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors...

CVE-2018-0605

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Sql injection

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

Remote code execution

Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors...

CVE-2018-0605

Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2018-0606

Pixelpost v1.7.3 and earlier is vulnerable to a SQL injection (CWE-89). The flaw allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. Affected product is Pixelpost versions ≤1.7.3; root cause/vectors are not detailed in the provided documents. Mitigatio...

CVE-2018-0604

Pixelpost v1.7.3 and earlier has an Arbitrary Code Execution vulnerability (CVE-2018-0604). Official records confirm remote code execution via unspecified vectors. The affected product is Pixelpost (versions up to 1.7.3). Several related sources/records (NVD, JVN, CNVD, CVE lists) consistently re...

CVE-2018-0605

Pixelpost v1.7.3 and earlier is affected by a Cross‑site Scripting (CWE-79) vulnerability (CVE-2018-0605). The issue allows an unauthenticated remote attacker to inject arbitrary web script or HTML that could run in the context of an affected user’s browser. The connected sources consistently ide...

CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2018-0604

Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors...

PT-2018-8962

Name of the Vulnerable Software and Affected Versions Pixelpost versions 1.7.3 and earlier Description The issue allows remote code execution via unspecified vectors. Recommendations For Pixelpost versions 1.7.3 and earlier, at the moment, there is no information about a newer version that contai...

PT-2018-8963

Name of the Vulnerable Software and Affected Versions Pixelpost versions 1.7.3 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For Pixelpost versions 1.7.3 and earlier, at the moment, there is no information abou...

PT-2018-8964

Name of the Vulnerable Software and Affected Versions Pixelpost versions 1.7.3 and earlier Description The issue allows remote authenticated attackers to execute arbitrary SQL commands. Recommendations For Pixelpost versions 1.7.3 and earlier, at the moment, there is no information about a newer...