CVE-2018-0606 - CVE House
Back to Database
Status published High CVE-2018-0606

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows...

Vulnerability Description

SQL injection vulnerability in the Pixelpost v1.7.3 and earlier allows remote authenticated attackers to execute arbitrary SQL commands via unspecified vectors.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-0606

Credits & Attribution

No credits recorded in the NVD database.

References

More from Pixelpost.org

View All →
CVE-2018-0605
Cross-site scripting vulnerability in Pixelpost v1.7.3 and earlier allows remote...
Medium 6.1
CVE-2018-0604
Pixelpost v1.7.3 and earlier allows remote code execution via unspecified...
High 7.2

Affected Vendor

Pixelpost.org

View all reports →

Affected Software

Pixelpost
Vulnerable Versions:
v1.7.3 and earlier

Timeline

Official Publish: June 26th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.