Piwigo CMS 2.5.3 - Multiple Web Vulnerabilities

Piwigo CMS 2.5.3 - Multiple Web Vulnerabilities Exploit Title: Piwigo 2.5.3 CMS:Multiple vulnerability's Author: sajith version: Piwigo 2.5.3 Vendor Homepage: http://piwigo.org vulnerable app link:http://www.piwigo.org/basics/downloads 1 Stored XSS on Multiple parameters click on Add photos...

Piwigo CMS 2.5.3 - Multiple Web Vulnerabilities

Exploit Title: Piwigo 2.5.3 CMS:Multiple vulnerability's Author: sajith version: Piwigo 2.5.3 Vendor Homepage: http://piwigo.org vulnerable app link:http://www.piwigo.org/basics/downloads 1 Stored XSS on Multiple parameters click on Add photos http://127.0.0.1/cms/piwigo/admin.php?page=photosadd...

Piwigo 2.5.2 Cross Site Scripting

Piwigo 2.5.2 Cross Site Scripting Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode...

Piwigo 2.5.2 - Cross-Site Scripting

Piwigo 2.5.2 - Cross-Site Scripting Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode...

Piwigo 2.5.2 - Cross-Site Scripting

Exploit Title: Piwigo 2.5.2 Add create a new album Follow this link : http://localhost/piwigo/admin.php?page=photosadd 3 Insert A photo In Your Album And Save It. 4 And Go To Photo Edit; Follow This Way : Photos Batch Manager single mode http://localhost/piwigo/admin.php?page=batchmanager&mode=un...

Piwigo install.php dl Parameter Traversal Arbitrary File Access

The version of Piwigo hosted on the remote web server is affected by a directory traversal vulnerability because it fails to properly sanitize user-supplied input to the 'dl' parameter of the 'install.php' script. This vulnerability could allow an unauthenticated, remote attacker to read and dele...

Piwigo Detection

The remote web server hosts Piwigo, an open source photo gallery application written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid65768; scriptversion"1.4"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/06/01"; scriptnameenglish:"Piwigo...

Piwigo Cross Site Request Forgery and Path Traversal Vulnerabilities

Piwigo is prone to cross-site request forgery CSRF and path traversal vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

FreeBSD : piwigo -- CSRF/Path Traversal (edd201a5-8fc3-11e2-b131-000c299b62e1)

High-Tech Bridge Security Research Lab reports : The CSRF vulnerability exists due to insufficient verification of the HTTP request origin in '/admin.php' script. A remote attacker can trick a logged-in administrator to visit a specially crafted webpage and create arbitrary PHP file on the remote...

CVE-2013-1468

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...

CVE-2013-1468

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...

Piwigo arbitrary file disclosure and arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net

Piwigo is written in PHP photo album script. Piwigo 2.4.6, and other versions did not properly validate the install. php script 'dl'parameter value, in the realization on the presence of security vulnerabilities, an attacker can exploit these vulnerabilities to view on the affected computer of an...

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

Directory traversal

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

CVE-2013-1469

CVE-2013-1469 affects Piwigo where install.php uses the dl parameter, allowing directory traversal to read and delete arbitrary files. The vulnerability is described as a directory traversal issue in Piwigo versions prior to 2.4.7. Connected advisories and scans corroborate that this is a file-ac...

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

CVE-2013-1468

CVE-2013-1468: Piwigo LocalFiles Editor plugin contains a CSRF vulnerability (pre-2.4.7) that enables an attacker to hijack administrator authentication and cause creation of arbitrary PHP files via unspecified vectors. Public details in the NVD description confirm the CSRF flaw with impact on in...

CVE-2013-1468

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...