EUVD-2017-18361

Malware in sbrugna...

CVE-2017-9426

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action...

Sql injection

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action...

CVE-2017-9425

The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...

CVE-2017-9425

The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...

CVE-2017-9426

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action...

Design/Logic Flaw

The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...

CVE-2017-9426

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action...

CVE-2017-9426

CVE-2017-9426 affects the Piwigo Facetag extension (version 0.0.3). The ws.php component enables SQL injection via the imageId parameter used by facetag.changeTag and facetag.listTags, as described in the CVE entry. The vulnerability is exploitable over the network with no authentication required...

CVE-2017-9425

The CVE-2017-9425 entry describes an XSS vulnerability in the Facetag extension 0.0.3 for Piwigo, exploitable via the name parameter to ws.php in a facetag.changeTag action. The affected component is the Facetag extension (version 0.0.3) for Piwigo; root cause is reflected in the description of a...

CVE-2017-9425

The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...

PT-2018-8510

Name of the Vulnerable Software and Affected Versions Facetag extension version 0.0.3 for Piwigo Description The issue allows SQL injection via the imageId parameter in a "facetag.changeTag" or "facetag.listTags" action. Recommendations For Facetag extension version 0.0.3, avoid using the imageId...

CVE-2017-9426: Improper Neutralization of Special Elements used in an SQL Command

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action...

Piwigo Facetag Extension SQL Injection Vulnerability

Piwigo is a web-based photo album software from Piwigo team. The software supports photo publishing, management, multiple browsing categories, tags, time, etc. Facetag extension is one of the face tagging plugins. A SQL injection vulnerability exists in the ws.php file in version 0.0.3 of the...

Facetag Cross-Site Scripting Vulnerability

Piwigo is a web-based photo album software from Piwigo team. The software supports photo publishing, management, multiple browsing categories, tags, time, etc. Facetag extension is one of the face tagging plugins. A cross-site scripting vulnerability exists in version 0.0.3 of the Piwigo Facetag...

PT-2018-8509

Name of the Vulnerable Software and Affected Versions Facetag extension version 0.0.3 Description The issue allows for XSS via the name parameter to "ws.php" in a "facetag.changeTag" action. Recommendations For Facetag extension version 0.0.3, avoid using the name parameter in the "ws.php" endpoi...

CVE-2017-9425: Improper Neutralization of Input During Web Page Generation

The Facetag extension 0.0.3 for Piwigo allows XSS via the name parameter to ws.php in a facetag.changeTag action...

Piwigo Facetag SQL Injection Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. The Piwigo Facetag plugin suffers from a SQL injection vulnerability due to the program failing to properly filter...

Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting

Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting Exploit Title: Piwigo plugin Facetag , Persistent XSS Date: 31-05-2017 Extension Version: 0.0.3 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=845 Exploit Author: Touhid M.Shaikh...

Piwigo Facetag 0.0.3 Plugin - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title: Piwigo plugin Facetag , Persistent XSS Date: 31-05-2017 Extension Version: 0.0.3 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=845 Exploit Author: Touhid M.Shaikh...