CVE-2017-7360

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...

CVE-2017-7363

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack...

CVE-2017-7362

Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack...

CVE-2017-7359

Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack...

CVE-2017-7362

The CVE-2017-7362 entry concerns Pixie 1.0.4, where an XSS vulnerability exists in the admin UI via admin/index.php s=publish&m=dynamic&x=, indicating improper input handling. The connected CNVD/NVD/OSV entries corroborate a cross-site scripting vulnerability affecting Pixie 1.0.4; no exact patch...

CVE-2017-7360

CVE-2017-7360 affects Pixie 1.0.4. The connected documents identify a cross-site scripting vulnerability in the admin interface, specifically in the admin/index.php s=settings&x= parameter, indicating insufficient input validation in the settings handling path. The impact is an XSS where an attac...

CVE-2017-7359

Pixie 1.0.4 contains a cross-site scripting (XSS) vulnerability in the CMS, described as an XSS in Pixie 1.0.4 via admin/index.php s=login&m=. Root cause: improper input validation/handling. Impact per sources indicates potential script injection; exploitation status is not provided in the docume...

CVE-2017-7360

Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack...

Pixie 1.0.4 Cross Site Request Forgery / Cross Site Scripting

Vulnerability ID: HTB22469 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityinpixie.html Product: Pixie Vendor: Toggle Labs Ltd http://www.getpixie.co.uk/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: Stored XSS Cross...

Pixie 1.0.4 - HTML Injection Cross-Site Scripting

Pixie 1.0.4 - HTML Injection Cross-Site Scripting source: https://www.securityfocus.com/bid/41727/info Pixie is prone to an HTML-injection vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage the issues to execu...