| Max CVSS | 5.1 | Min CVSS | 2.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2006-2889 | 5.1 |
Multiple SQL injection vulnerabilities in index.php in Pixelpost 1-5rc1-2 and earlier allow remote attackers to execute arbitrary SQL commands, and leverage them to gain administrator privileges, via the (1) category or (2) archivedate parameter.
|
18-10-2018 - 16:43 | 07-06-2006 - 10:02 | |
| CVE-2006-2891 | 2.6 |
Cross-site scripting (XSS) vulnerability in admin/index.php for Pixelpost 1-5rc1-2 and earlier allows remote attackers to inject arbitrary HTML or web script via the loginmessage parameter.
|
18-10-2018 - 16:43 | 07-06-2006 - 10:02 | |
| CVE-2006-2890 | 5.1 |
Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the _SESSION["pixelpost_admin"] parameter to 1 in calls to admin scripts such as admin/vie
|
18-10-2018 - 16:43 | 07-06-2006 - 10:02 |