CVE-2006-2890: Pixelpost

Medium severity, CVSS 5.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Pixelpost 1-5rc1-2 and earlier, when register_globals is enabled, allows remote attackers to gain administrator privileges and conduct other attacks by setting the _SESSION["pixelpost_admin"] parameter to 1 in calls to admin scripts such as admin/view_info.php.

Affected products

• Pixelpost Pixelpost: version 1.5_rc1 only

Published 2006-06-07. Last modified 2026-06-16.