CVE-2017-17827

Piwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via /admin.php?page=configuration&section=main or /admin.php?page=batchmanager&mode=unit. An attacker can exploit this to coerce an admin user into performing unintended actions...

PT-2017-15032

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue allows an attacker to perform Cross-Site Request Forgery attacks, potentially coercing an admin user into performing unintended actions. This can be achieved via the...

PT-2017-15031

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue affects the Configuration component, where a Persistent Cross Site Scripting vulnerability exists via the gallery title parameter in an "admin.php?page=configuration&section=main" request. This can be...