Piwigo 2.4.6 (install.php) Remote Arbitrary File Read/Delete Vulnerability

No description provided by source. Piwigo 2.4.6 install.php Remote Arbitrary File Read/Delete Vulnerability Vendor: Piwigo project Product web page: http://www.piwigo.org Affected version: 2.4.6 Summary: Piwigo is a photo gallery software for the web that comes with powerful features to publish a...

Piwigo 2.4.6 - Multiple Vulnerabilities

No description provided by source...

piwigo-2.1.2 - Multiple Vulnerabilities

No description provided by source...

Piwigo 2.5.2 Cross Site Scripting

No description provided by source. Exploit Title: Piwigo 2.5.2 = Cross Site Scripting Date: 2013 26 September Author: Arsan Software Homepage: http://www.piwigo.org Version : 2.5.2 Tested on: Linux & Windows Category: webapps Google Dork: intext:Powered by Piwigo + Exploit : - About Piwigo : Host...

Piwigo 2.6.1 - CSRF Vulnerability

No description provided by source...

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4648

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

Security feature bypass

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4648

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

Sql injection

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4648

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

CVE-2014-4648

Technical details about CVE-2014-4648 are not publicly available in the provided documents. Monitor for updates from official advisories.

CVE-2014-4648

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4649

Piwigo contains a SQL injection vulnerability (CVE-2014-4649) in the photo-edit subsystem for versions 2.6.x and 2.7.x prior to 2.7.0beta2. The issue allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field. Affected software is Piwigo, with the root ...

CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4649: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate field...

CVE-2014-4648: Undefined Security Weakness

Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."...

PT-2014-6045

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.6.3 Description The issue is related to a security failure, but the impact and attack vectors are unknown. Recommendations For versions prior to 2.6.3, update to version 2.6.3 or later to resolve the issue...