CVE-2010-3305 | High | 8.8 | 2019-11-12 | Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the admin password. |
CVE-2009-4900 | Medium | 6.1 | 2019-10-28 | pixelpost 1.7.1 has XSS |
CVE-2009-4899 | Critical | 9.8 | 2019-10-28 | pixelpost 1.7.1 has SQL injection |
CVE-2018-0606 | High | 7.2 | 2018-06-26 | SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors. |
CVE-2018-0605 | Medium | 6.1 | 2018-06-26 | Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. |
CVE-2018-0604 | High | 7.2 | 2018-06-26 | Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors. |
CVE-2011-3792 | | | 2011-09-24 | Pixelpost 1.7.3 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error me… |
CVE-2011-1100 | | | 2011-02-25 | Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) fin… |
CVE-2008-3365 | | | 2008-07-30 | Directory traversal vulnerability in index.php in Pixelpost 1.7.1 on Windows, when register_globals is enabled, allows remote attackers to include and execute… |
CVE-2008-0358 | | | 2008-01-18 | SQL injection vulnerability in index.php in Pixelpost 1.7 allows remote attackers to execute arbitrary SQL commands via the parent_id parameter. |
CVE-2006-2891 | | | 2006-06-07 | Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script v… |
CVE-2006-2890 | | | 2006-06-07 | Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting… |
CVE-2006-2889 | | | 2006-06-07 | Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL commands, and leverage th… |
CVE-2006-1106 | | | 2006-03-09 | Cross-site scripting (XSS) vulnerability in Pixelpost 1.5 beta 1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) message… |
CVE-2006-1105 | | | 2006-03-09 | Pixelpost 1.5 beta 1 and earlier allows remote attackers to obtain configuration information via a direct request to includes/phpinfo.php, which calls the phpi… |
CVE-2006-1104 | | | 2006-03-09 | Multiple SQL injection vulnerabilities in Pixelpost 1.5 beta 1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the showimage param… |
CVE-2006-0409 | | | 2006-01-25 | Cross-site scripting (XSS) vulnerability in index.php in Pixelpost Photoblog 1.4.3 allows remote attackers to inject arbitrary web script or HTML via the "Add… |