Piwigo 2.4.6 - Multiple Vulnerabilities

No description provided by source...

Piwigo 2.5.2 Cross Site Scripting

No description provided by source. Exploit Title: Piwigo 2.5.2 = Cross Site Scripting Date: 2013 26 September Author: Arsan Software Homepage: http://www.piwigo.org Version : 2.5.2 Tested on: Linux & Windows Category: webapps Google Dork: intext:Powered by Piwigo + Exploit : - About Piwigo : Host...

Piwigo 2.0.6 - Multiple Vulnerabilities

No description provided by source. Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other...

Piwigo 2.6.1 - CSRF Vulnerability

No description provided by source...

piwigo-2.1.2 - Multiple Vulnerabilities

No description provided by source...

CVE-2014-4648

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4648

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

Sql injection

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

Security feature bypass

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4648

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

CVE-2014-4648

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

CVE-2014-4648

Technical details about CVE-2014-4648 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4649

Piwigo contains a SQL injection vulnerability (CVE-2014-4649) in the photo-edit subsystem for versions 2.6.x and 2.7.x prior to 2.7.0beta2. The issue allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field. Affected software is Piwigo, with the root ...

CVE-2014-4649: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4648: Undefined Security Weakness

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

PT-2014-6045

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.6.3 Description The issue is related to a security failure, but the impact and attack vectors are unknown. Recommendations For versions prior to 2.6.3, update to version 2.6.3 or later to resolve the issue...