Lucene search
MitreCVELIST:CVE-2019-13363HistorySep 13, 2019 - 12:22 p.m.
CVE-2019-13363
2019-09-1312:22:58
mitre
www.cve.org
admin.php?page=notification_by_mail in Piwigo 2.9.5 has XSS via the nbm_send_html_mail, nbm_send_mail_as, nbm_send_detailed_content, nbm_complementary_mail_content, nbm_send_recent_post_dates, or param_submit parameter. This is exploitable via CSRF.
Related
nvd
nvd
CVE-2019-13363
2019-09-13 13:15:11
cve
cve
CVE-2019-13363
2019-09-13 13:15:11
prion
prion
Cross site request forgery (csrf)
2019-09-13 13:15:00
osv
osv
CVE-2019-13363
2019-09-13 13:15:11
packetstorm
packetstorm
Piwigo 2.9.5 Cross Site Request Forgery / Cross Site Scripting
2019-09-13 00:00:00
GilaCMS 1.11.5 Cross Site Request Forgery / Cross Site Scripting
2020-06-23 00:00:00
openvas
openvas
Piwigo < 2.10.0 Multiple Vulnerabilities
2019-09-16 00:00:00