Login Request a demo
PI
Product
Pixie
by Lucidcrew · last CVE Apr 3, 2017
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities9In the news0Timeline
Severity mix
Critical 1High 0Medium 5Low 0
Severity
All severities9Critical1High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pixie to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2017-7402
9.8
5%
Apr 3
Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with…
Affected: 1.04
CVE-2017-7363
6.1
1%
Mar 31
Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack
Affected: 1.04
CVE-2017-7362
6.1
1%
Mar 31
Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack
Affected: 1.04
CVE-2017-7361
6.1
1%
Mar 31
Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack
Affected: 1.04
CVE-2017-7360
6.1
1%
Mar 31
Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack
Affected: 1.04
CVE-2017-7359
6.1
1%
Mar 31
Pixie 1.0.4 allows an admin/index.php s=login&m= XSS attack
Affected: 1.04
CVE-2014-3786
–
1%
Jun 4
Multiple cross-site scripting (XSS) vulnerabilities in the contact module (admin/modules/contact.php) in Pixie CMS 1.04 allow remote attackers to inject arbitrary web script or…
Affected: 1.04
CVE-2011-4710
–
2%
Dec 8
Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) pixie_user parameter and (2) Referer…
Affected: 1.02; 1.03; 1.04
CVE-2011-3793
–
2%
Sep 24
Pixie 1.04 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by…
Affected: 1.04
Showing 9