CVE-2011-4710

CVE-2011-4710 describes multiple SQL injection vulnerabilities in Pixie CMS versions 1.01 through 1.04, affecting getpixie and lucidcrew pixie products. Attackers can exploit these flaws remotely without authentication by injecting arbitrary SQL commands through the pixie_user parameter and the Referer HTTP header. With a CVSS score of 7.5, this vulnerability carries a high severity, allowing for potential compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.