1062 matches found
CVE-2020-9467
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...
CVE-2020-9467
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...
CVE-2020-9468
The CVE-2020-9468 issue concerns the Community plugin 2.9.e-beta for Piwigo. Affected: the plugin’s image information handling, where an attacker can set image metadata on images in albums they lack permission for by manipulating the image_id parameter. Root cause appears to be a permission check...
CVE-2020-9467
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function...
CVE-2020-9467
CVE-2020-9467 affects Piwigo 2.10.1 . The vulnerability is a stored XSS in the /ws.php request via the file parameter, caused by the pwg.images.setInfo function. Documented impact is a client-side script execution risk with a NVD base score of 5.4 (MEDIUM) and network attack vector with user inte...
Piwigo < 2.10.2 Multiple Vulnerabilities
Piwigo is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Piwigo cross-site scripting vulnerability (CNVD-2020-04664)
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A cross-site scripting vulnerability exists in Piwigo version 2.10.1. The vulnerability stems from the lack of proper validation of...
CVE-2020-8089
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
CVE-2020-8089
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
Cross site scripting
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
CVE-2020-8089
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
CVE-2020-8089
Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
CVE-2020-8089
PVE: CVE-2020-8089 affects Piwigo 2.10.1 with a stored XSS in the Group Name Field on the group_list page. The issue stems from insufficient validation of client-side data, enabling potentially malicious input to be stored and reflected. Connected documents corroborate the vulnerability across mu...
piwigo -- Multible Vulnerabilities
Piwigo reports: Piwigo 2.10.1 is affected by stored XSS via the Group Name Field to the grouplist page...
Piwigo Cross-Site Scripting Vulnerability (CNVD-2020-03257)
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A cross-site scripting vulnerability exists in Piwigo. The vulnerability stems from the lack of proper validation of client-side data ...
CVE-2012-4526
piwigo has XSS in password.php incomplete fix for CVE-2012-4525...
CVE-2012-4525
piwigo has XSS in password.php...
Default credentials
piwigo has XSS in password.php...