EUVD-2022-50721

Malicious code in bioql PyPI...

CVE-2022-48007

A stored cross-site scripting XSS vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent...

CVE-2022-48007

A stored cross-site scripting XSS vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent...

PT-2023-15545

Name of the Vulnerable Software and Affected Versions Piwigo version 13.4.0 Description A stored cross-site scripting XSS vulnerability in identification.php allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent. This issue enables attackers ...

CVE-2022-48007: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting XSS vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent...

Open redirect

An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the "redirect" parameter is not validated...

CVE-2017-9464

An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the "redirect" parameter is not validated...

CVE-2017-9464

An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the "redirect" parameter is not validated...

CVE-2017-9464

An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the "redirect" parameter is not validated...

CVE-2017-9464

CVE-2017-9464: Open redirect vulnerability in Piwigo 2.9 and likely earlier versions. The issue affects the identification.php component where the redirect parameter is not validated, enabling remote attackers to redirect users to arbitrary sites (phishing risk). No exploitation details or specif...

PT-2017-18937

Name of the Vulnerable Software and Affected Versions Piwigo versions 2.9 and prior Description An open redirect issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. The redirect parameter in the identification.php component is not...

CVE-2017-9464: URL Redirection to Untrusted Site

An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the "redirect" parameter is not validated...