CVE Tools
Track your stack

Pixel-motion

6 CVEs tracked since 2006. Since Sep 2006, none of them reached CISA KEV.

Pixel-motion CVEs per month

Sep 2006 to Apr 2008. Point at a month, or focus the strip and use the arrow keys.
Pixel-motion CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2006-0920
2006-10null or fewer
2006-11null or fewer
2006-12null or fewer
2007-01null or fewer
2007-02null or fewer
2007-03null or fewer
2007-04null or fewer
2007-05null or fewer
2007-06null or fewer
2007-07null or fewer
2007-08null or fewer
2007-09null or fewer
2007-10null or fewer
2007-11null or fewer
2007-12null or fewer
2008-01null or fewer
2008-02null or fewer
2008-03null or fewer
2008-0440

Products

The products that kept showing up in Pixel-motion's monthly top three, with their CVEs summed over those months.

  1. Pixel Motion Blog62 months

Latest CVEs

The 7 most recently published vulnerabilities affecting Pixel-motion.

  1. CVE-2008-1986Cross-site scripting (XSS) vulnerability in liste_article.php in Blog Pixel Motion (aka PixelMotion) allows remote attackers to inject arbitrary web script or HTML via the jours parameter.4.3
  2. CVE-2008-1866admin/modif_config.php in Blog Pixel Motion (aka PixelMotion) does not require admin authentication, which allows remote authenticated users to upload arbitrary PHP scripts in a ZIP archive, which ...9.0
  3. CVE-2008-1868admin/sauvBase.php in Blog Pixel Motion (aka Blog PixelMotion) does not require authentication, which allows remote attackers to trigger a database backup dump, and obtain the resulting blogPM.sql ...7.5
  4. CVE-2008-1867SQL injection vulnerability in Blog Pixel Motion (aka Blog PixelMotion) allows remote attackers to execute arbitrary SQL commands via the categorie parameter to index.php, possibly related to inclu...7.5
  5. CVE-2006-5085Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variabl...7.5
  6. CVE-2006-5086Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass parameters. NOTE...6.4
  7. CVE-2006-1426Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) pas...7.5

The record

Peak rank
#22 in Apr 2008
Busiest month shown
Apr 2008, 4 CVEs
Months with a KEV entry
0 since Sep 2006
Monthly snapshots
2 since 2006
Pixel-motion's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store