Записи pixel motion
7 опубликованных записей вендора pixel motion.
Профиль для исследователя
- Попали в KEV
- 0 · 0 %
- С эксплойтом
- 0 · 0 %
- Pre-auth RCE
- 3
- С записью об исправлении
- 0 %
- Медиана: публикация → KEV
- Ни одна запись не попала в KEV
Записи по годам
Столбик: всего · тёмная часть: CISA KEV.
Повторяющиеся классы
- CWE-287 Improper Authentication1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
7 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
44В плане | CVE-2006-5085Proof of concept | Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the npixel motion · pixel motion blog | Высокая7,5 | — | 47,0 % | 28 сент. 2006 г. |
38Наблюдать | CVE-2008-1866Proof of concept | admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated userspixel motion · pixel motion blog · CWE-94 | Критическая9,0 | — | 5,2 % | 17 апр. 2008 г. |
31Наблюдать | CVE-2008-1868Proof of concept | admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a dpixel motion · pixel motion blog · CWE-287 | Высокая7,5 | — | 2,6 % | 17 апр. 2008 г. |
31Наблюдать | CVE-2006-1426Proof of concept | Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date paramepixel motion · pixel motion blog | Высокая7,5 | — | 1,9 % | 28 мар. 2006 г. |
30Наблюдать | CVE-2008-1867Proof of concept | SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQL commands via the capixel motion · pixel motion blog · CWE-89 | Высокая7,5 | — | 0,9 % | 17 апр. 2008 г. |
25Наблюдать | CVE-2006-5086Proof of concept | Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.ppixel motion · pixel motion blog | Средняя6,4 | — | 1,2 % | 28 сент. 2006 г. |
17Наблюдать | CVE-2008-1986Proof of concept | Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote attackers to inject arbitpixel motion · pixel motion blog · CWE-79 | Средняя4,3 | — | 1,4 % | 27 апр. 2008 г. |
- CVE-2006-508544В плане
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the n
ВысокаяCVSS 7,5Proof of conceptEPSS 47 %pixel motion · pixel motion blog28 сент. 2006 г.
- CVE-2008-186638Наблюдать
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users
КритическаяCVSS 9,0Proof of conceptEPSS 5 %pixel motion · pixel motion blog17 апр. 2008 г.
- CVE-2008-186831Наблюдать
admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a d
ВысокаяCVSS 7,5Proof of conceptEPSS 2 %pixel motion · pixel motion blog17 апр. 2008 г.
- CVE-2006-142631Наблюдать
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parame
ВысокаяCVSS 7,5Proof of conceptEPSS 1 %pixel motion · pixel motion blog28 мар. 2006 г.
- CVE-2008-186730Наблюдать
SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQL commands via the ca
ВысокаяCVSS 7,5Proof of conceptEPSS 0 %pixel motion · pixel motion blog17 апр. 2008 г.
- CVE-2006-508625Наблюдать
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.p
СредняяCVSS 6,4Proof of conceptEPSS 1 %pixel motion · pixel motion blog28 сент. 2006 г.
- CVE-2008-198617Наблюдать
Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote attackers to inject arbit
СредняяCVSS 4,3Proof of conceptEPSS 1 %pixel motion · pixel motion blog27 апр. 2008 г.