CVE-2016-10085

admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2016-9751

CVE-2016-9751 pertains to Piwigo 2.8.3 where the search parameter in the search results front end is susceptible to cross-site scripting (XSS), allowing remote attackers to inject arbitrary script/HTML. The OpenVAS entry confirms a Piwigo XSS vulnerability; other connected sources describe the sa...