PatchTheCVEpixelpost vulnerabilities
Recent CVEs affecting pixelpost products. 6 tracked.
pixelpost has 6 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 1. Most recent: 2019-11-12. Highest priority: CVE-2009-4899 (score 57/100).
- CVE-2018-0606 HIGH 7.2 DOWNGRADE SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execu
- CVE-2018-0605 MEDIUM 6.1 UPGRADE Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote attackers to inject arbitrary
- CVE-2018-0604 HIGH 7.2 DOWNGRADE Pixelpost v1.7.3 and earlier allows remote code execution via unspecified vectors.
- CVE-2010-3305 HIGH 8.8 DOWNGRADE Cross-site request forgery (CSRF) vulnerability in pixelpost 1.7.3 could allow remote attackers to change the
- CVE-2009-4900 MEDIUM 6.1 DOWNGRADE pixelpost 1.7.1 has XSS
- CVE-2009-4899 CRITICAL 9.8 DOWNGRADE pixelpost 1.7.1 has SQL injection
FAQ
How do I fix pixelpost vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pixelpost being exploited right now?
None of the tracked pixelpost CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pixelpost CVE should I patch first?
CVE-2009-4899 currently ranks highest (57/100): pixelpost 1.7.1 has SQL injection.