Show filters
9 Total Results
Displaying 1-9 of 9
Sort by:
Attacker Value
Unknown
CVE-2010-3305
Disclosure Date: November 12, 2019 (last updated November 27, 2024)
Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.
0
Attacker Value
Unknown
CVE-2009-4900
Disclosure Date: October 28, 2019 (last updated November 27, 2024)
pixelpost 1.7.1 has XSS
0
Attacker Value
Unknown
CVE-2009-4899
Disclosure Date: October 28, 2019 (last updated November 27, 2024)
pixelpost 1.7.1 has SQL injection
0
Attacker Value
Unknown
CVE-2018-0606
Disclosure Date: June 26, 2018 (last updated November 26, 2024)
SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2018-0604
Disclosure Date: June 26, 2018 (last updated November 26, 2024)
Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors.
0
Attacker Value
Unknown
CVE-2011-3792
Disclosure Date: September 24, 2011 (last updated October 04, 2023)
Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functions_feeds.php and certain other files.
0
Attacker Value
Unknown
CVE-2011-1100
Disclosure Date: February 25, 2011 (last updated October 04, 2023)
Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) findfid, (2) id, (3) selectfcat, (4) selectfmon, or (5) selectftag parameter in an images action.
0
Attacker Value
Unknown
CVE-2008-3365
Disclosure Date: July 30, 2008 (last updated October 04, 2023)
Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the language_full parameter.
0
Attacker Value
Unknown
CVE-2008-0358
Disclosure Date: January 18, 2008 (last updated October 04, 2023)
SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter.
0
