CVE-2011-1100

Pixelpost - SQL Injection

Title source: rule
STIX 2.1

Description

Multiple SQL injection vulnerabilities in admin/index.php in Pixelpost 1.7.3 allow remote authenticated users to execute arbitrary SQL commands via the (1) findfid, (2) id, (3) selectfcat, (4) selectfmon, or (5) selectftag parameter in an images action.

Exploits (1)

exploitdb WRITEUP
by LiquidWorm · textwebappsphp
https://www.exploit-db.com/exploits/16160

References (3)

Core 3
Core References
Exploit exploit x_refsource_exploit-db
http://www.exploit-db.com/exploits/16160
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/65474

Scores

EPSS 0.0077
EPSS Percentile 73.6%

Details

CWE
CWE-89
Status published
Products (1)
pixelpost/pixelpost 1.7.3
Published Feb 25, 2011
Tracked Since Feb 18, 2026