CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Prion•added 2017/04/03 5:59 p.m.•25 views

Design/Logic Flaw

Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg...

7.5CVSS9.4AI score0.05019EPSS

SaveExploits5References2Affected Software1

Rapid7 Vulnerability Database (full)•added 2017/03/31 12:00 a.m.•5 views

CVE-2017-7363: Improper Neutralization of Input During Web Page Generation

Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack...

6.1CVSS5.7AI score0.00797EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2017/03/31 12:00 a.m.•4 views

CVE-2017-7362: Improper Neutralization of Input During Web Page Generation

Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack...

6.1CVSS5.7AI score0.00818EPSS

SaveExploits1References2

Rapid7 Vulnerability Database (full)•added 2017/03/31 12:00 a.m.•4 views

CVE-2017-7361: Improper Neutralization of Input During Web Page Generation

Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack...

6.1CVSS5.7AI score0.00818EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by