CVE-2017-17775

Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request...

CVE-2017-17775

Piwigo 2.9.2 is vulnerable to a cross-site scripting (XSS) flaw triggered by the name parameter in an admin.php?page=album-3-properties request. The issue affects the web-based photo gallery software as described in CVE-2017-17775; details in connected records confirm the vulnerability class and ...

CVE-2017-17775: Improper Neutralization of Input During Web Page Generation

Piwigo 2.9.2 has XSS via the name parameter in an admin.php?page=album-3-properties request...

Piwigo 'name' Parameter Cross-Site Scripting Vulnerability

Piwigo is a web-based photo album software from Piwigo team. The software supports photo publishing, management, multiple browsing category, tag, time, etc. Batch Manager component is one of the manager components. A cross-site scripting vulnerability exists in Piwigo version 2.9.2. A remote...

SQL Injection Vulnerability in JYmusic AlbumController.php Page

JYmusic is an open source cross-platform music management system. A SQL injection vulnerability exists in the JYmusic AlbumController.php page. Allow attackers to exploit the vulnerability to obtain sensitive database information...

snapfish.fr XSS vulnerability

Vulnerable URL: https://www.snapfish.fr/2/album-photo?cobrandName=snapfishit=tbm...

PT-2017-6114 · D Link +1 · D-Link Dns-320 +2

Name of the Vulnerable Software and Affected Versions: D-Link DNS-320L versions prior to 1.04b12 D-Link DNS-327L versions prior to 1.03b04 Build0119 Description: The issue allows remote attackers to obtain arbitrary photos and publish them to an arbitrary Facebook profile via a target album id an...

maagalim.com XSS vulnerability

Vulnerable URL: http://www.maagalim.com/site/detail/departAlbum/albumPic.asp?departid=98658id=48241="--!"=1=1===0=IFwinEditGadget482418003=0====1=1= Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

Synology Photo Station Cross-Site Scripting Vulnerability

Synology Photo Station is a solution for sharing pictures, videos and blogs over the Internet from Synology, a Chinese company. A cross-site scripting vulnerability exists in Synology Photo Station. The vulnerability can be exploited by remote attackers to inject arbitrary web script or HTML via...

Synology Audio Station Cross-Site Scripting Vulnerability

Synology Audio Station is an audio manager from Synology, a Chinese company. A cross-site scripting vulnerability exists in Synology Audio Station version 5.1 before 5.1-2550 and version 5.4 before 5.4-2857. A remote attacker can exploit the vulnerability to inject arbitrary web script or HTML wi...

Piwigo Cross-Site Request Forgery Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site request forgery vulnerability exists in Piwigo 2.9.1 and earlier versions. A remote attacker can exploit th...

Piwigo Cross-Site Request Forgery Vulnerability (CNVD-2017-13999)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A cross-site request forgery vulnerability exists in Piwigo 2.9.1 and earlier versions. A remote attacker can exploit thi...

CVE-2015-9104

Cross-site scripting XSS vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title...

Cross site scripting

Cross-site scripting XSS vulnerabilities in Synology Audio Station 5.1 before 5.1-2550 and 5.4 before 5.4-2857 allows remote authenticated attackers to inject arbitrary web script or HTML via the album title...

CVE-2015-9102

Multiple cross-site scripting XSS vulnerabilities in Synology Photo Station 6.0 before 6.0-2638 and 6.3 before 6.3-2962 allow remote authenticated attackers to inject arbitrary web script or HTML via the 1 album name, 2 file name of uploaded photos, 3 description of photos, or 4 tag of the photos...

CVE-2017-10681

Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to unlock albums via a crafted request...

CVE-2017-10680

Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for requests to change a private album to public via a crafted request...

Design/Logic Flaw

Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID number of a private album. The permalink ID numbers are easily guessed...

CVE-2017-10679

Piwigo through 2.9.1 allows remote attackers to obtain sensitive information about the descriptive name of a permalink by examining the redirect URL that is returned in a request for the permalink ID number of a private album. The permalink ID numbers are easily guessed...