Lucene search
+L

1062 matches found

exploitpack
exploitpack
added 2017/05/31 12:00 a.m.16 views

Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting

Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting Exploit Title: Piwigo plugin Facetag , Persistent XSS Date: 31-05-2017 Extension Version: 0.0.3 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=845 Exploit Author: Touhid M.Shaikh...

6.7AI score
SaveExploits0
Exploit DB
Exploit DB
added 2017/05/31 12:00 a.m.59 views

Piwigo Plugin Facetag 0.0.3 - Cross-Site Scripting

Exploit Title: Piwigo plugin Facetag , Persistent XSS Date: 31-05-2017 Extension Version: 0.0.3 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=845 Exploit Author: Touhid M.Shaikh Contact: http://twitter.com/touhidshaikh22 Website:...

5.3AI score
SaveExploits0
zdt
zdt
added 2017/05/31 12:00 a.m.39 views

Piwigo Plugin Facetag 0.0.3 - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Facetag Extension in Piwigo, Multiple SQL injection Date: 30-05-2017 Extension Version: 0.0.3 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=845 Exploit Author:...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2017/05/30 12:00 a.m.40 views

Piwigo Plugin Facetag 0.0.3 - SQL Injection

Piwigo Plugin Facetag 0.0.3 - SQL Injection Exploit Title: Facetag Extension in Piwigo, Multiple SQL injection Date: 30-05-2017 Extension Version: 0.0.3 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=845 Exploit Author: Touhid M.Shai...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2017/05/30 12:00 a.m.66 views

Piwigo Plugin Facetag 0.0.3 - SQL Injection

Exploit Title: Facetag Extension in Piwigo, Multiple SQL injection Date: 30-05-2017 Extension Version: 0.0.3 Software Link: http://piwigo.org/basics/downloads Extension link : http://piwigo.org/ext/extensionview.php?eid=845 Exploit Author: Touhid M.Shaikh Contact: http://twitter.com/touhidshaikh2...

5.3AI score
SaveExploits0
CNVD
CNVD
added 2017/05/26 12:00 a.m.9 views

Piwigo cross-site scripting vulnerability (CNVD-2017-08783 )

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A cross-site scripting vulnerability exists in the admin.php file in Piwigo 2.9.0 and earlier versions. A remote attacker...

4.8CVSS5.9AI score0.0082EPSS
SaveExploits1References1
CNVD
CNVD
added 2017/02/14 12:00 a.m.9 views

Piwigo cross-site scripting vulnerability (CNVD-2017-01655)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in versions of Piwigo prior to 2.8.6. A remote attacker can exploit this...

6.1CVSS6.2AI score0.01283EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/02/07 12:00 a.m.30 views

Piwigo < 2.8.6 XSS Vulnerability

Piwigo is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...

6.1CVSS6.1AI score0.01283EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2017/02/03 12:00 a.m.33 views

Fedora 25 : shotwell (2017-8c3c43cc4f)

This release turns on HTTPS encyption all over the publishing plugins. Users using Tumblr and Yandex.Fotki publishing are strongly advised to change their passwords and reauthenticate Shotwell to those services after upgrade. Users of Picasa and Youtube publishing are strongly advised to...

5.5AI score
SaveExploits0References1
OSV
OSV
added 2017/01/28 6:59 p.m.17 views

CVE-2017-5608

Cross-site scripting XSS vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename...

6.1CVSS5.8AI score
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2017/01/28 6:59 p.m.23 views

CVE-2017-5608

Cross-site scripting XSS vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename...

6.1CVSS6.5AI score0.01283EPSS
SaveExploits0References3
Prion
Prion
added 2017/01/28 6:59 p.m.17 views

Cross site scripting

Cross-site scripting XSS vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename...

4.3CVSS6AI score0.01283EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2017/01/28 6:59 p.m.21 views

CVE-2017-5608

Cross-site scripting XSS vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename...

6.1CVSS6AI score0.01283EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2017/01/28 6:00 p.m.25 views

CVE-2017-5608

Cross-site scripting XSS vulnerability in the image upload function in Piwigo before 2.8.6 allows remote attackers to inject arbitrary web script or HTML via a crafted image filename...

6AI score0.01283EPSS
SaveExploits0References4
CVE
CVE
added 2017/01/28 6:00 p.m.64 views

CVE-2017-5608

Piwigo

6.1CVSS6AI score0.01283EPSS
SaveExploits0References4Affected Software1
CNVD
CNVD
added 2017/01/05 12:00 a.m.13 views

Piwigo Remote File Inclusion Vulnerability (CNVD-2017-00112)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A security vulnerability exists in the admin/plugin.php file in Piwigo 2.8.3 and earlier versions, which stems from the...

9.8CVSS9.2AI score0.02355EPSS
SaveExploits0References1
OpenVAS
OpenVAS
added 2017/01/05 12:00 a.m.191 views

Piwigo Multiple Vulnerabilities (Jan 2017)

Piwigo is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if description...

9.8CVSS8.5AI score0.99714EPSS
SaveExploits59References3
CNVD
CNVD
added 2017/01/04 12:00 a.m.14 views

Piwigo File Containment Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A security vulnerability exists in the admin/batchmanager.php file in Piwigo 2.8.3 and earlier versions. A remote attacke...

7.2CVSS7AI score0.01837EPSS
SaveExploits0References1
CNVD
CNVD
added 2017/01/04 12:00 a.m.14 views

Piwigo Cross-Site Scripting Vulnerability (CNVD-2017-00119)

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A cross-site scripting vulnerability exists in the admin/plugin.php file in Piwigo 2.8.3 and prior versions. A remote...

6.1CVSS6AI score0.0124EPSS
SaveExploits0References1
UbuntuCve
UbuntuCve
added 2017/01/03 6:59 a.m.25 views

CVE-2016-10105

admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence...

9.8CVSS7.6AI score0.02355EPSS
SaveExploits0References4
Rows per page
Query Builder