Lucene search
K

10 matches found

CNVD
CNVD
added 2017/12/22 12:0 a.m.2 views

Synology Photo Station Cross-Site Scripting Vulnerability (CNVD-2018-01382)

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site scripting vulnerability exists in the PixlrEditorHandler.php file in Synology Photo Station versions prior to 6.8.0-3456. A remote attacker can exploit the vulnerability to inject...

5.4CVSS5.9AI score0.00187EPSS
Exploits0References1
OSV
OSV
added 2017/12/20 6:29 p.m.3 views

CVE-2017-12072

Cross-site scripting XSS vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.8.0-3456 allows remote authenticated users to inject arbitrary web scripts or HTML via the id parameter...

5.4CVSS5.9AI score0.00187EPSS
Exploits0References1
CNVD
CNVD
added 2017/08/25 12:0 a.m.1 views

Synology Photo Station Cross-Site Scripting Vulnerability (CNVD-2017-24391)

Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A cross-site scripting vulnerability exists in the PixlrEditorHandler.php file in Synology Photo Station versions prior to 6.7.0-3414. A remote attacker can exploit the vulnerability to inject...

5.4CVSS5.2AI score0.00187EPSS
Exploits0References1
OSV
OSV
added 2017/08/08 3:29 p.m.2 views

CVE-2017-11152

Directory traversal vulnerability in PixlrEditorHandler.php in Synology Photo Station before 6.7.3-3432 and 6.3-2967 allows remote attackers to write arbitrary files via the path parameter...

7.5CVSS5.9AI score
Exploits0References2
Openbugbounty
Openbugbounty
added 2017/01/30 3:29 a.m.17 views

apps.pixlr.com XSS vulnerability

Vulnerable URL: http://apps.pixlr.com/proxy/?url=data://temp/588eb2ccf9ff19a6ed00363d.html Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Coordinated Disclosure...

6.3AI score
Exploits0
hackapp
hackapp
added 2016/04/01 9:19 a.m.36 views

Pixlr – Free Photo Editor - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Pixlr – Free Photo Editor published at the 'play' market has multiple vulnerabilities...

0.9AI score
Exploits0References1Affected Software1
exploitpack
exploitpack
added 2012/06/23 12:0 a.m.17 views

SilverStripe CMS Pixlr Image Editor - upload.php Arbitrary File Upload

SilverStripe CMS Pixlr Image Editor - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/54172/info Pixlr Image Editor is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplie...

0.1AI score
Exploits0
Packet Storm
Packet Storm
added 2012/06/23 12:0 a.m.14 views

Silverstripe Pixlr Image Editor 1.0.4 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

7.4AI score
Exploits0
Exploit DB
Exploit DB
added 2012/06/23 12:0 a.m.27 views

SilverStripe CMS Pixlr Image Editor - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/54172/info Pixlr Image Editor is prone to a vulnerability that lets attackers upload arbitrary files. The issue occurs because the application fails to adequately sanitize user-supplied input. An attacker can exploit this vulnerability to upload arbitrary...

7.4AI score
Exploits0
0day.today
0day.today
added 2012/06/22 12:0 a.m.13 views

Silverstripe Modules - Pixlr Image Editor Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

7.1AI score
Exploits0
Rows per page
Query Builder