CVE-2006-5086
Blog Pixel Motion 2.1.1 - RCE
Title source: llmDescription
Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass parameters. NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not.
Exploits (1)
References (5)
Scores
EPSS
0.0141
EPSS Percentile
80.5%
Details
Status
published
Products (1)
pixel_motion/pixel_motion_blog
2.1.1
Published
Sep 29, 2006
Tracked Since
Feb 18, 2026