İçeriğe atla
Noroxi

pixelpost kayıtları

pixelpost üreticisine ait 17 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
4
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 18
  2. 19

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

17 kayıt
  • CVE-2009-4899
    39İzleyin

    pixelpost 1.7.1 has SQL injection

    KritikCVSS 9,8İstismar yokEPSS %1

    pixelpost · pixelpost28 Eki 2019

  • CVE-2010-3305
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.

    YüksekCVSS 8,8İstismar yokEPSS %1

    pixelpost · pixelpost12 Kas 2019

  • CVE-2006-1104
    30İzleyin

    Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers to execute arbitrary SQL commands via (1)

    YüksekCVSS 7,5İstismar yokEPSS %2

    pixelpost · pixelpost9 Mar 2006

  • CVE-2018-0604
    29İzleyin

    Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors.

    YüksekCVSS 7,2İstismar yokEPSS %2

    pixelpost · pixelpost26 Haz 2018

  • CVE-2008-3365
    28İzleyin

    Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to i

    OrtaCVSS 6,8Kavram kanıtıEPSS %4

    pixelpost · pixelpost30 Tem 2008

  • CVE-2008-0358
    28İzleyin

    SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent_id parame

    OrtaCVSS 6,8Kavram kanıtıEPSS %2

    pixelpost · pixelpost18 Oca 2008

  • CVE-2018-0606
    28İzleyin

    SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via

    YüksekCVSS 7,2İstismar yokEPSS %1

    pixelpost · pixelpost26 Haz 2018

  • CVE-2011-1100
    26İzleyin

    Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL comma

    OrtaCVSS 6,5Kavram kanıtıEPSS %1

    pixelpost · pixelpost25 Şub 2011

  • CVE-2009-4900
    24İzleyin

    pixelpost 1.7.1 has XSS

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelpost · pixelpost28 Eki 2019

  • CVE-2018-0605
    24İzleyin

    Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspec

    OrtaCVSS 6,1İstismar yokEPSS %1

    pixelpost · pixelpost26 Haz 2018

  • CVE-2006-1105
    21İzleyin

    Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, w

    OrtaCVSS 5,0İstismar yokEPSS %2

    pixelpost · pixelpost9 Mar 2006

  • CVE-2006-2890
    20İzleyin

    Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other

    OrtaCVSS 5,1İstismar yokEPSS %1

    pixelpost · pixelpost7 Haz 2006

  • CVE-2011-3792
    20İzleyin

    Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation

    OrtaCVSS 5,0İstismar yokEPSS %1

    pixelpost · pixelpost23 Eyl 2011

  • CVE-2006-2889
    20İzleyin

    Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL comman

    OrtaCVSS 5,1Kavram kanıtıEPSS %1

    pixelpost · pixelpost7 Haz 2006

  • CVE-2006-0409
    18İzleyin

    Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    pixelpost · photoblog24 Oca 2006

  • CVE-2006-1106
    18İzleyin

    Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 4,3İstismar yokEPSS %2

    pixelpost · pixelpost9 Mar 2006

  • CVE-2006-2891
    11İzleyin

    Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary H

    DüşükCVSS 2,6İstismar yokEPSS %2

    pixelpost · pixelpost7 Haz 2006