CVE-2010-1707

CVE-2010-1707 affects Piwigo 2.0.9 and earlier. The register.php endpoint does not properly filter the login and mail_address parameters, enabling multiple cross‑site scripting (XSS) vulnerabilities. Remote attackers could inject arbitrary HTML/JavaScript that would execute in a victim’s browser ...

Piwigo 2.0.6 SQL Injection / Cross Site Scripting

Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...

Piwigo v2.0.6 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ====================================== Piwigo v2.0.6 Multiple Vulnerabilities ====================================== Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For...

Piwigo v2.0.6 Multiple Vulnerabilities

No description provided by source. Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other...

Piwigo v2.0.6 Multiple Vulnerabilities

Exploit for unknown platform in category web applications ========================================= Piwigo : mysqlfetcharray expects parameter 1 to be resource, boolean given in C:\xampp\htdocs\piwigo-2.0.6\include\functions.inc.php on line 936 The parentid and imageid and unsanitized however...

Piwigo 2.0.6 - Multiple Vulnerabilities

Piwigo 2.0.6 - Multiple Vulnerabilities Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other...

Piwigo 2.0.6 - Multiple Vulnerabilities

Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...

Cross site scripting

Cross-site scripting XSS vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4039

Cross-site scripting XSS vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4039

Cross-site scripting XSS vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2009-4039

CVE-2009-4039 affects Piwigo before 2.0.6. It is a cross-site scripting (XSS) vulnerability that allows remote attackers to inject arbitrary script/HTML via unspecified vectors. The flaw’s root cause and impacted component are not detailed in the provided sources beyond the version boundary. Reme...

CVE-2009-4039

Cross-site scripting XSS vulnerability in Piwigo before 2.0.6 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Piwigo 2.0 - comments.php Multiple Cross-Site Scripting Vulnerabilities

Piwigo 2.0 - comments.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/41897/info Piwigo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to...

Piwigo 2.0 - 'comments.php' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/41897/info Piwigo is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

CVE-2009-2933

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the itemsnumber parameter...

Sql injection

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the itemsnumber parameter...

CVE-2009-2933

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the itemsnumber parameter...

CVE-2009-2933

CVE-2009-2933 describes an SQL injection in Piwigo’s comments.php before v2.0.3 via the items_number parameter, allowing remote attackers to execute arbitrary SQL commands. Affected: Piwigo

CVE-2009-2933

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the itemsnumber parameter...

PT-2009-5283 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 2.0.3 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the items number parameter in the comments.php file. Recommendations: For versions prior to 2.0.3, update to...