CVE-2007-4314: Pixlie

Medium severity, CVSS 6.8. EPSS: 1.8% chance of exploitation in the next 30 days.

pixlie.php in Pixlie 1.7 allows remote attackers to trigger the reading and JPEG image processing of files in a remote directory tree via a URL in the root parameter. NOTE: this can be leveraged for traffic amplification or other denial of service.

Affected products

• Pixlie Pixlie: version 1.7 only

Published 2007-08-13. Last modified 2026-06-16.