CVE-2016-10085

Summary: Piwigo

CVE-2016-10084: Improper Access Control

admin/batchmanager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page'tab' variable aka the mode parameter...

CVE-2016-10085: Improper Access Control

admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter...

CVE-2016-10083: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/plugin.php in Piwigo through 2.8.3 allows remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in a certain error case...

PT-2016-4574

Name of the Vulnerable Software and Affected Versions Piwigo versions through 2.8.3 Description The issue allows remote authenticated administrators to conduct File Inclusion attacks. This is achieved via the tab parameter in the "admin/languages.php" endpoint. Recommendations For versions throug...

PT-2016-4573

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.8.4 Description The issue allows remote authenticated administrators to conduct File Inclusion attacks. This is achieved via the page'tab' variable, also known as the mode parameter, in the admin/batch manager.php...

PT-2016-4572

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.8.4 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted filename that is mishandled in a certain error case in admin/plugin.php...

Piwigo < 2.8.5 RFI Vulnerability

Piwigo is prone to a remote file inclusion RFI vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...

Piwigo XSS Vulnerability

Piwigo is prone to a cross-site scripting vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...

Piwigo Detection

Detection of Piwigo The script sends a connection request to the server and attempts to detect the presence of Piwigo and to extract its version SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective rig...

Piwigo 'search_rules.php' Cross-Site Scripting Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time, and more. A cross-site scripting vulnerability exists in the 'search results front end' feature in Piwigo version 2.8.3. A remote...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2016-9751

CVE-2016-9751 pertains to Piwigo 2.8.3 where the search parameter in the search results front end is susceptible to cross-site scripting (XSS), allowing remote attackers to inject arbitrary script/HTML. The OpenVAS entry confirms a Piwigo XSS vulnerability; other connected sources describe the sa...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2016-9751

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

CVE-2016-9751: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter...

PT-2016-7813

Name of the Vulnerable Software and Affected Versions Piwigo version 2.8.3 Description A cross-site scripting XSS issue exists in the search results front end, allowing remote attackers to inject arbitrary web script or HTML via the search parameter. This can lead to the execution of malicious co...