CVE-2020-6756

CVE-2020-6756 affects Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version). The vulnerability is in languageOptions.php and allows unauthenticated remote code execution via the lang parameter. Connected sources confirm an RCE condition with this PHP file, affecting PixelStor 5000 K devices;...

CVE-2020-6757

The CVE-2020-6757 vulnerability affects Rasilient PixelStor 5000 K (KDI version 4.0.1580-20150629). It resides in contentHostProperties.php and allows an authenticated attacker to remotely execute code via the name parameter. Exposure is network-based with authenticated access required; impact is...

CVE-2020-6758

The CVE-2020-6758 entry corresponds to a cross-site scripting (XSS) vulnerability in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version), specifically in Option/optionsAll.php, exploitable through the ContentFrame parameter. This is confirmed across multiple connected documents (Red Hat, C...