Vulnerability in Pixlie

CVE-2007-4314

pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote directory tree via a URL in the root parameter. NOTE: this can be leveraged for traffic amplification or other denial of service.

EPSS: 0.018 (76.4th percentile) — read the EPSS interpretation.

Affected products

  • Pixlie — versions 1.7
  • N/a — versions n/a

References