EUVD-2017-16386

Malware in sbrugna...

EUVD-2017-16390

Malware in sbrugna...

EUVD-2017-16389

Malware in sbrugna...

EUVD-2017-16387

Malware in sbrugna...

Design/Logic Flaw

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg...

CVE-2017-7402

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg...

CVE-2017-7402

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg...

Sql injection

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack...

CVE-2017-7359

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack...

CVE-2017-7362

Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack...

CVE-2017-7361

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack...

CVE-2017-7360

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...

CVE-2017-7361

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack...

Design/Logic Flaw

Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack...

CVE-2017-7363

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack...

CVE-2017-7363

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack...

CVE-2017-7360

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...