Pixie Image Editor

1 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2017-12905 Sep 25, 17:29 CRITICAL Act Now

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE SSRF Pixie Image Editor

NVD

CVSS 3.1

10.0

EPSS

1.8%

CVE-2017-12905

EPSS 2% CVSS 10.0

CRITICAL Act Now

Server Side Request Forgery vulnerability in Vebto Pixie Image Editor 1.4 and 1.7 allows remote attackers to disclose information or execute arbitrary code via the url parameter to Launderer.php. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

PHP RCE SSRF +1

NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy