Vulnerabilities

TI-2020-05480 CVE-2020-6756 · GHSA-mm45-cc89-fwg9

languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows…

MEDIUM 55

languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows unauthenticated attackers to remotely execute code via the lang parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.10559 Published 2020-01-09 No fix listed CWE-78

TI-2020-05482 CVE-2020-6758 · GHSA-2q62-h7rf-mgj2

A cross-site scripting (XSS) vulnerability in Option/optionsAll.php in Rasilient…

LOW 29

A cross-site scripting (XSS) vulnerability in Option/optionsAll.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows remote attackers to inject arbitrary web script or HTML via the ContentFrame parame…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00793 Published 2020-01-09 No fix listed CWE-79

TI-2020-05481 CVE-2020-6757 · GHSA-9452-vhg2-pfvx

contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version)…

MEDIUM 41

contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows authenticated attackers to remotely execute code via the name parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01401 Published 2020-01-09 No fix listed CWE-78

Vulnerabilities

Filters

languageOptions.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version) allows…

A cross-site scripting (XSS) vulnerability in Option/optionsAll.php in Rasilient…

contentHostProperties.php in Rasilient PixelStor 5000 K:4.0.1580-20150629 (KDI Version)…