1047 matches found
CVE-2022-24620
Piwigo version 12.2.0 is vulnerable to stored cross-site scripting XSS, which can lead to privilege escalation. In this way, admin can steal webmaster's cookies to get the webmaster's access...
CVE-2022-24620
CVE-2022-24620 affects Piwigo 12.2.0 with a stored XSS in admin.php due to improper validation/ filtering of user-supplied data. This can enable an attacker to escalate privileges and steal webmaster cookies, leading to webmaster access. Public details consistently describe the vulnerability as X...
CVE-2021-45357
Cross Site Scripting XSS vulnerability exists in Piwigo 12.x via the pwgactivity function in include/functions.inc.php...
CVE-2021-45357
Cross Site Scripting XSS vulnerability exists in Piwigo 12.x via the pwgactivity function in include/functions.inc.php...
CVE-2021-45357
Cross Site Scripting XSS vulnerability exists in Piwigo 12.x via the pwgactivity function in include/functions.inc.php...
Cross site scripting
Cross Site Scripting XSS vulnerability exists in Piwigo 12.x via the pwgactivity function in include/functions.inc.php...
CVE-2021-45357
Cross Site Scripting XSS vulnerability exists in Piwigo 12.x via the pwgactivity function in include/functions.inc.php...
CVE-2021-45357
CVE-2021-45357 describes a cross-site scripting (XSS) vulnerability in Piwigo 12.x exploitable via the pwg_activity function in include/functions.inc.php. Public records in the connected sources confirm the vulnerable component and location, with related OpenVAS entry noting “Piwigo
Piwigo 跨站脚本漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data in the WEB...
CVE-2016-3735
Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmtrand in order to generate password reset tokens. mtrand output can be predicted after recovering the seed used to generate it. This low an unauthenticated attacker to take over an...
Design/Logic Flaw
Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmtrand in order to generate password reset tokens. mtrand output can be predicted after recovering the seed used to generate it. This low an unauthenticated attacker to take over an...
CVE-2016-3735
Piwigo is image gallery software written in PHP. When a criteria is not met on a host, piwigo defaults to usingmtrand in order to generate password reset tokens. mtrand output can be predicted after recovering the seed used to generate it. This low an unauthenticated attacker to take over an...
Piwigo 安全漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization, and permission management. Piwigo has a security vulnerability that can be exploited by an unauthenticated attacker to take over an account...
PT-2022-7862 · Piwigo · Piwigo
Name of the Vulnerable Software and Affected Versions: Piwigo affected versions not specified Description: The issue affects Piwigo, an image gallery software written in PHP. When certain criteria are not met on a host, Piwigo defaults to using mt rand to generate password reset tokens. The outpu...
CVE-2016-3735
CVE-2016-3735 affects Piwigo, a PHP-based image gallery. The root issue is that when a host criteria is not met, Piwigo uses mt_rand to generate password reset tokens, and the output can be predicted once the seed is known. This enables an unauthenticated attacker who knows an administrator’s ema...
Piwigo Cross-Site Scripting Vulnerability (CNVD-2021-101688)
Piwigo is a set of Web-based open source image library software. Piwigo has a cross-site scripting vulnerability in version 11.5.0, which stems from a lack of user-supplied data and output data validation filtering. An attacker could exploit this vulnerability to conduct XSS attacks via the syste...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...
CVE-2021-40882
A Cross Site Scripting XSS vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location...