CVE-2016-10105

admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence...

CVE-2016-10105: Exposure of Sensitive Information to an Unauthorized Actor

admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence...

PT-2017-7738

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.8.4 Description The issue concerns the failure to validate the sections variable in the admin/plugin.php file, which can lead to information disclosure and code execution if the variable contains a .. sequence...