pixel motion kayıtları
pixel motion üreticisine ait 7 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 3
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Yıllara göre kayıt
Çubuk: toplam · koyu kısım: CISA KEV.
Tekrar eden sınıflar
- CWE-287 Improper Authentication1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')1
- CWE-94 Improper Control of Generation of Code ('Code Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
7 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
44Planlayın | CVE-2006-5085Kavram kanıtı | Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the npixel motion · pixel motion blog | Yüksek7,5 | — | %47,2 | 28 Eyl 2006 |
38İzleyin | CVE-2008-1866Kavram kanıtı | admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated userspixel motion · pixel motion blog · CWE-94 | Kritik9,0 | — | %5,2 | 17 Nis 2008 |
31İzleyin | CVE-2008-1868Kavram kanıtı | admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a dpixel motion · pixel motion blog · CWE-287 | Yüksek7,5 | — | %2,6 | 17 Nis 2008 |
31İzleyin | CVE-2006-1426Kavram kanıtı | Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date paramepixel motion · pixel motion blog | Yüksek7,5 | — | %1,9 | 28 Mar 2006 |
30İzleyin | CVE-2008-1867Kavram kanıtı | SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQL commands via the capixel motion · pixel motion blog · CWE-89 | Yüksek7,5 | — | %0,9 | 17 Nis 2008 |
25İzleyin | CVE-2006-5086Kavram kanıtı | Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.ppixel motion · pixel motion blog | Orta6,4 | — | %1,2 | 28 Eyl 2006 |
17İzleyin | CVE-2008-1986Kavram kanıtı | Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote attackers to inject arbitpixel motion · pixel motion blog · CWE-79 | Orta4,3 | — | %1,4 | 27 Nis 2008 |
- CVE-2006-508544Planlayın
Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the n
YüksekCVSS 7,5Kavram kanıtıEPSS %47pixel motion · pixel motion blog28 Eyl 2006
- CVE-2008-186638İzleyin
admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users
KritikCVSS 9,0Kavram kanıtıEPSS %5pixel motion · pixel motion blog17 Nis 2008
- CVE-2008-186831İzleyin
admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a d
YüksekCVSS 7,5Kavram kanıtıEPSS %2pixel motion · pixel motion blog17 Nis 2008
- CVE-2006-142631İzleyin
Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parame
YüksekCVSS 7,5Kavram kanıtıEPSS %1pixel motion · pixel motion blog28 Mar 2006
- CVE-2008-186730İzleyin
SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQL commands via the ca
YüksekCVSS 7,5Kavram kanıtıEPSS %0pixel motion · pixel motion blog17 Nis 2008
- CVE-2006-508625İzleyin
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.p
OrtaCVSS 6,4Kavram kanıtıEPSS %1pixel motion · pixel motion blog28 Eyl 2006
- CVE-2008-198617İzleyin
Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote attackers to inject arbit
OrtaCVSS 4,3Kavram kanıtıEPSS %1pixel motion · pixel motion blog27 Nis 2008