CVE-2016-10084

CVE-2016-10084 affects Piwigo <= 2.8.3 where admin/batch_manager.php allows remote authenticated administrators to perform a file inclusion via the $page['tab'] (mode) parameter. This is a remote inclusion risk with impact on confidentiality/integrity/availability as per CVSS. OpenVAS notes Pi...