Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...

CVE-2013-1468

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...

Piwigo arbitrary file disclosure and arbitrary file deletion vulnerability-vulnerability warning-the black bar safety net

Piwigo is written in PHP photo album script. Piwigo 2.4.6, and other versions did not properly validate the install. php script 'dl'parameter value, in the realization on the presence of security vulnerabilities, an attacker can exploit these vulnerabilities to view on the affected computer of an...

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

Directory traversal

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

CVE-2013-1469

CVE-2013-1469 affects Piwigo where install.php uses the dl parameter, allowing directory traversal to read and delete arbitrary files. The vulnerability is described as a directory traversal issue in Piwigo versions prior to 2.4.7. Connected advisories and scans corroborate that this is a file-ac...

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

PT-2013-3152

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.4.7 Description The issue allows remote attackers to read and delete arbitrary files due to a directory traversal vulnerability. This is achieved by using a .. dot dot in the dl parameter of the install.php file...

CVE-2013-1469: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. dot dot in the dl parameter...

CVE-2013-1468

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...

CVE-2013-1468

CVE-2013-1468: Piwigo LocalFiles Editor plugin contains a CSRF vulnerability (pre-2.4.7) that enables an attacker to hijack administrator authentication and cause creation of arbitrary PHP files via unspecified vectors. Public details in the NVD description confirm the CSRF flaw with impact on in...

CVE-2013-1468

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...

PT-2013-3151

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.4.7 Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack administrator authentication for creating arbitrary PHP files. Recommendations For versions prior to 2.4.7, update t...

CVE-2013-1468: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors...

Multiple Vulnerabilities in Piwigo

Advisory ID: HTB23144 Product: Piwigo Vendor: Piwigo project Vulnerable Versions: 2.4.6 and probably prior Tested Version: 2.4.6 Vendor Notification: February 6, 2013 Vendor Patch: February 19, 2013 Public Disclosure: February 27, 2013 Vulnerability Type: Cross-Site Request Forgery CWE-352, Path...

Piwigo 2.4.6 - Multiple Vulnerabilities

Advisory ID: HTB23144 Product: Piwigo Vendor: Piwigo project Vulnerable Versions: 2.4.6 and probably prior Tested Version: 2.4.6 Vendor Notification: February 6, 2013 Vendor Patch: February 19, 2013 Public Disclosure: February 27, 2013 Vulnerability Type: Cross-Site Request Forgery CWE-352, Path...

Piwigo 2.4.6 - Multiple Vulnerabilities

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Piwigo, which can be exploited to perform Сross-Site Request Forgery and Path Traversal attacks. Advisory Details: High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Piwigo, whic...

Piwigo 2.4.6 Cross Site Request Forgery / Traversal Vulnerabilities

Piwigo version 2.4.5 suffers from cross site request forgery and path traversal vulnerabilities. Product: Piwigo Vendor: Piwigo project Vulnerable Versions: 2.4.6 and probably prior Tested Version: 2.4.6 Vendor Notification: February 6, 2013 Vendor Patch: February 19, 2013 Public Disclosure:...