TI-2009-04655 CVE-2009-4899 · GHSA-8qg4-88g8-fvxf
pixelpost 1.7.1 has SQL injection
Priority MEDIUM 45
pixelpost 1.7.1 has SQL injection
Pixelpost.org
Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
Pixelpost.org records in CISA KEVNo Pixelpost.org vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
17 records
TI-2010-03159 CVE-2010-3305 · GHSA-8vpp-hw3q-63mw
Cross-site request forgery in Pixelpost.org pixelpost
Priority MEDIUM 40
Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password.
TI-2008-03226 CVE-2008-3365 · GHSA-rrqp-7v76-3h43
Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when…
Priority LOW 37
Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a ..
TI-2006-01071 CVE-2006-1104 · GHSA-r397-cwxg-8f8r
Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote…
Priority LOW 36
Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the showimage parameter in index.php; and the (2) USER_AGENT, (3) HTTP_REFERER,…
TI-2018-00561 CVE-2018-0604 · GHSA-gpwc-59gx-c48m
Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors.
Priority LOW 35
Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors.
TI-2018-00563 CVE-2018-0606 · GHSA-wjhr-fhjm-rq2v
SQL injection in Pixelpost.org Pixelpost
Priority LOW 34
SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.
TI-2008-00333 CVE-2008-0358 · GHSA-9g87-xfmq-7vwg
SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to…
Priority LOW 34
SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter.
TI-2011-00953 CVE-2011-1100 · GHSA-wvw3-4jv4-x75p
Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote…
Priority LOW 31
Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) findfid, (2) id, (3) selectfcat, (4) selectfmon, or (5) selectft…
TI-2018-00562 CVE-2018-0605 · GHSA-cvcj-jhw6-6cj2
Cross-site scripting in Pixelpost.org Pixelpost
Priority LOW 29
Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
TI-2009-04656 CVE-2009-4900 · GHSA-rqr2-vwcj-g935
pixelpost 1.7.1 has XSS
Priority LOW 29
pixelpost 1.7.1 has XSS
TI-2006-02798 CVE-2006-2890 · GHSA-pxm8-hvww-585q
Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers…
Priority LOW 26
Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the _SESSION["pixelpost_admin"] parameter to 1 in calls to a…
TI-2006-02797 CVE-2006-2889 · GHSA-x7r5-j6v5-g5qf
Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier…
Priority LOW 26
Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL commands, and leverage them to gain administrator privileges, via the (1) category or…
TI-2006-01072 CVE-2006-1105 · GHSA-fgwg-h2c9-x3v4
Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration…
Priority LOW 26
Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpinfo function.
TI-2011-03349 CVE-2011-3792 · GHSA-hpwx-hp8q-56c6
Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct…
Priority LOW 25
Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by includes/functions_feeds.php and ce…
TI-2006-01073 CVE-2006-1106 · GHSA-p8fp-3gp2-x8qh
Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) message, (2) name, (3) url, and (4) email parameters when commenting…
TI-2006-00395 CVE-2006-0409 · GHSA-6rj8-pfw7-h6cq
Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add Comment" field in a comment popup.
TI-2006-02799 CVE-2006-2891 · GHSA-pc7f-3555-2mx5
Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and…
Priority LOW 17
Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script via the loginmessage parameter.