CVE-2008-1868

Blog Pixel Motion - Info Disclosure

Title source: llm

Description

admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a database backup dump, and obtain the resulting blogPM.sql file that contains sensitive information.

Exploits (1)

exploitdb WORKING POC VERIFIED
by JIKO · textwebappsphp
https://www.exploit-db.com/exploits/5380

Scores

EPSS 0.0466
EPSS Percentile 89.2%

Classification

CWE
CWE-287
Status draft

Affected Products (1)

pixel_motion/pixel_motion_blog

Timeline

Published Apr 17, 2008
Tracked Since Feb 18, 2026