CVE-2011-4710: Getpixie Pixie

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in Pixie CMS 1.01 through 1.04 allow remote attackers to execute arbitrary SQL commands via the (1) pixie_user parameter and (2) Referer HTTP header in a request to the default URI.

Affected products

• Getpixie Pixie: version 1.01 only; version 1.01a only
• Lucidcrew Pixie: version 1.02 only; version 1.03 only; version 1.04 only

Published 2011-12-08. Last modified 2026-06-16.