GCVE - cpe:2.3:a:lucidcrew:pixie:1.04:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:lucidcrew:pixie:1.04:*:*:*:*:*:*:*

part: a version: 1.04 update: *

Vendor	Lucidcrew (`22fcf83e-bf47-5eaf-be5f-23dc7c5f2b19`)
Product	Pixie (`6d275988-3379-5249-9580-6f790436ffdc`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/lucidcrew/pixie-cms`	purl2cpe	2026-06-01 10:11:42.040305

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-7402`	vulnerable	2026-06-08 05:09:55.851352	Details available Pixie 1.0.4 allows remote authenticated users to upload and execute arbitrary PHP code via the POST data in an admin/index.php?s=publish&x=filemanager request for a filename with a double extension, such as a .jpg.php file with Content-Type of image/jpeg. Published: 2017-04-03T17:00:00.000Z Updated: 2024-08-05T16:04:10.598Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/41784/ http://rungga.blogspot.co.id/2017/04/remote-file-upload-vulnerability-in.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7363`	vulnerable	2026-06-08 05:09:55.797555	Details available Pixie 1.0.4 allows an admin/index.php s=publish&m=module&x= XSS attack. Published: 2017-03-31T04:26:00.000Z Updated: 2024-08-05T15:56:36.460Z Open on db.gcve.eu Reference links http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html http://www.securityfocus.com/bid/97259	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7362`	vulnerable	2026-06-08 05:09:55.797291	Details available Pixie 1.0.4 allows an admin/index.php s=publish&m=dynamic&x= XSS attack. Published: 2017-03-31T04:26:00.000Z Updated: 2024-08-05T15:56:36.527Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/97268 http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7361`	vulnerable	2026-06-08 05:09:55.797021	Details available Pixie 1.0.4 allows an admin/index.php s=publish&m=static&x= XSS attack. Published: 2017-03-31T04:26:00.000Z Updated: 2024-08-05T15:56:36.393Z Open on db.gcve.eu Reference links http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html http://www.securityfocus.com/bid/97274	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7360`	vulnerable	2026-06-08 05:09:55.796730	Details available Pixie 1.0.4 allows an admin/index.php s=settings&x= XSS attack. Published: 2017-03-31T04:26:00.000Z Updated: 2024-08-05T15:56:36.526Z Open on db.gcve.eu Reference links http://rungga.blogspot.co.id/2017/03/multiple-xss-vulnerability-on-pixie-104.html http://www.securityfocus.com/bid/97264	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-7359`	vulnerable	2026-06-08 05:09:55.796349	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-3786`	vulnerable	2026-06-08 05:05:42.719335	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-4710`	vulnerable	2026-06-08 04:59:32.740873	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-3793`	vulnerable	2026-06-08 04:59:27.854132	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.