Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the 1 pwg.groups.addUser, 2 pwg.groups.deleteUser, 3 pwg.groups.setInfo, 4 pwg.users.setInfo, 5 pwg.permissions.add, or 6...

CVE-2014-4614: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the 1 pwg.groups.addUser, 2 pwg.groups.deleteUser, 3 pwg.groups.setInfo, 4 pwg.users.setInfo, 5 pwg.permissions.add, or 6...

PT-2014-6022

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.6.2 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities. These vulnerabilities allow remote attackers to hijack the authentication of administrators for specific requests. The...