Vendorsgetpixiepixie_cmsall versions
Vulnerabilities

getpixie Pixie CMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2009-1066
SQL injection vulnerability in the referral function in admin/lib/lib_logs.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the Referer HTTP header in a request.
Published 2009-03-24 · Modified
7.51 PoCEPSS 0.024
CVE-2009-1065
SQL injection vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to execute arbitrary SQL commands via the x parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published 2009-03-24 · Modified
7.5EPSS 0.011
CVE-2009-1067
Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote attackers to inject arbitrary web script or HTML via the x parameter.
Published 2009-03-24 · Modified
4.31 PoCEPSS 0.037