CVE-2012-4525

piwigo has XSS in password.php...

CVE-2012-4526

piwigo has XSS in password.php incomplete fix for CVE-2012-4525...

Design/Logic Flaw

piwigo has XSS in password.php incomplete fix for CVE-2012-4525...

Default credentials

piwigo has XSS in password.php...

CVE-2012-4525

piwigo has XSS in password.php...

CVE-2012-4526

piwigo has XSS in password.php incomplete fix for CVE-2012-4525...

CVE-2012-4526

Piwigo is affected by a cross-site scripting (XSS) vulnerability in password.php. This entry (CVE-2012-4526) indicates an incomplete fix for CVE-2012-4525, with XSS described in the same file and linked citations. The provided documents do not specify affected versions, exploit status, in-the-wil...

CVE-2012-4526

piwigo has XSS in password.php incomplete fix for CVE-2012-4525...

CVE-2012-4525

Piwigo has a Cross-Site Scripting (XSS) vulnerability in password.php (CVE-2012-4525). Multiple sources confirm the issue exists in Piwigo and some Red Hat/Ubuntu entries describe an incomplete fix for CVE-2012-4525, indicating remediation is not fully clear from the provided documents. The affec...

CVE-2012-4525

piwigo has XSS in password.php...

Command Execution Vulnerability in Piwigo

Piwigo is a web-based photo album software from the Piwigo team. Piwigo suffers from a command execution vulnerability that can be exploited by an attacker to execute system commands...

Piwigo 2.9.5 Cross Site Scripting / SQL Injection / Command Execution Vulnerabilities

Piwigo versions 2.9.5 and below suffer from cross site scripting, command execution, and remote SQL injection vulnerabilities. Piwigo = 2.9.5 Multiple Vulnerabilities Released Date: 2019-09-22 Last Modified: 2019-09-22 Company Info: Piwigo.org Version Info: Vulnerable Piwigo = 2.9.5 -- Table of...

Piwigo 2.9.5 Cross Site Scripting / SQL Injection / Command Execution

/ / / / / / / / / / / / / / / / / / / / / \ / // / // / / / / / / / // / / / /,/// // /// // GulfTech Research and Development Piwigo = 2.9.5 Multiple Vulnerabilities Released Date: 2019-09-22 Last Modified: 2019-09-22 Company Info: Piwigo.org Version Info: Vulnerable Piwigo = 2.9.5 -- Table...

Piwigo Cross-Site Scripting Vulnerability (CNVD-2019-32000)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A cross-site scripting vulnerability exists in admin.php?page=notificationbymail in Piwigo version 2.9.5. The vulnerabili...

Piwigo Cross-Site Scripting Vulnerability (CNVD-2019-31999)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in Piwigo version 2.9.5 in admin.php?page=accountbilling. The vulnerability...

Piwigo < 2.10.0 Multiple Vulnerabilities

Piwigo is prone to multiple vulnerabilities. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-13364

admin.php?page=accountbilling in Piwigo 2.9.5 has XSS via the vatnumber, billingname, company, or billingaddress parameter. This is exploitable via CSRF...

CVE-2019-13364

admin.php?page=accountbilling in Piwigo 2.9.5 has XSS via the vatnumber, billingname, company, or billingaddress parameter. This is exploitable via CSRF...

CVE-2019-13363

admin.php?page=notificationbymail in Piwigo 2.9.5 has XSS via the nbmsendhtmlmail, nbmsendmailas, nbmsenddetailedcontent, nbmcomplementarymailcontent, nbmsendrecentpostdates, or paramsubmit parameter. This is exploitable via CSRF...

CVE-2019-13363

admin.php?page=notificationbymail in Piwigo 2.9.5 has XSS via the nbmsendhtmlmail, nbmsendmailas, nbmsenddetailedcontent, nbmcomplementarymailcontent, nbmsendrecentpostdates, or paramsubmit parameter. This is exploitable via CSRF...