CVE-2020-6756

languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows unauthenticated attackers to remotely execute code via the lang parameter...

CVE-2020-6758

The CVE-2020-6758 entry corresponds to a cross-site scripting (XSS) vulnerability in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version), specifically in Option/optionsAll.php, exploitable through the ContentFrame parameter. This is confirmed across multiple connected documents (Red Hat, C...

PT-2020-19215

Name of the Vulnerable Software and Affected Versions Rasilient PixelStor 5000 K version 4.0.1580-20150629 Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parameter. This can be exploited by sending malicious input to th...

CVE-2020-6758: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parameter...

CVE-2020-6757: Improper Neutralization of Special Elements used in an OS Command

contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows authenticated attackers to remotely execute code via the name parameter...

CVE-2020-6756: Improper Neutralization of Special Elements used in an OS Command

languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 KDI Version allows unauthenticated attackers to remotely execute code via the lang parameter...

PT-2020-19213

Name of the Vulnerable Software and Affected Versions Rasilient PixelStor 5000 K version 4.0.1580-20150629 Description The issue allows unauthenticated attackers to remotely execute code. This is achieved via the lang parameter in the languageOptions.php file. Recommendations For version...

PT-2020-19214

Name of the Vulnerable Software and Affected Versions Rasilient PixelStor 5000 K version 4.0.1580-20150629 Description The issue allows authenticated attackers to remotely execute code. This is achieved via the name parameter in the contentHostProperties.php file. Recommendations For version...