Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 26/03/2009 Updated: 14/02/2024

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in index.php in Pixie CMS 1.01a allows remote malicious users to inject arbitrary web script or HTML via the x parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
getpixie pixie cms 1.01a

Pixie CMS Multiple Vulnerabilities Pixie is a "free, open source web application that will help you quickly create your own website Many people refer to this type of software as a 'content management system (cms)'" (wwwgetpixiecouk) Pixie is written in PHP with a MySQL database back end Pixie Blog XSS It is possible to trivially i ...

CWE-79 http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0324.html http://osvdb.org/52832 http://lampsecurity.org/Pixie-CMS-Multiple-Vulnerabilities http://secunia.com/advisories/34364 http://www.securityfocus.com/bid/34189 https://exchange.xforce.ibmcloud.com/vulnerabilities/49333 https://www.exploit-db.com/exploits/8252 https://nvd.nist.gov https://www.exploit-db.com/exploits/8252/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2009-1067

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect