CVEvulnerability
CVE-2013-1468
7.6 HIGH
Official page ↗
- Status
- Modified
- Published
- 2013-03-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.6 HIGH — AV:N/AC:H/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.
Affected configurations
• piwigo piwigo (<= 2.4.6)
• piwigo piwigo 1.0.0
• piwigo piwigo 1.0.1
• piwigo piwigo 1.0.2
• piwigo piwigo 1.1.0
• piwigo piwigo 1.2.0
• piwigo piwigo 1.2.1
• piwigo piwigo 1.3.0
• piwigo piwigo 1.3.1
• piwigo piwigo 1.3.2
• piwigo piwigo 1.3.3
• piwigo piwigo 1.3.4
• piwigo piwigo 1.4.0
• piwigo piwigo 1.4.1
• piwigo piwigo 1.5.0
• piwigo piwigo 1.5.1
• piwigo piwigo 1.5.2
• piwigo piwigo 1.6.0
• piwigo piwigo 1.6.1
• piwigo piwigo 1.6.2
• piwigo piwigo 1.7.0
• piwigo piwigo 1.7.1
• piwigo piwigo 1.7.2
• piwigo piwigo 1.7.3
• piwigo piwigo 2.0
• piwigo piwigo 2.0.0
• piwigo piwigo 2.0.1
• piwigo piwigo 2.0.2
• piwigo piwigo 2.0.3
• piwigo piwigo 2.0.4
• piwigo piwigo 2.0.5
• piwigo piwigo 2.0.6
• piwigo piwigo 2.0.7
• piwigo piwigo 2.0.8
• piwigo piwigo 2.0.9
• piwigo piwigo 2.0.10
• piwigo piwigo 2.1.0
• piwigo piwigo 2.1.1
• piwigo piwigo 2.1.2
• piwigo piwigo 2.1.3
• piwigo piwigo 2.1.4
• piwigo piwigo 2.1.5
• piwigo piwigo 2.1.6
• piwigo piwigo 2.2.0
• piwigo piwigo 2.2.1
• piwigo piwigo 2.2.2
• piwigo piwigo 2.2.3
• piwigo piwigo 2.2.4
• piwigo piwigo 2.2.5
• piwigo piwigo 2.3.0
• piwigo piwigo 2.3.1
• piwigo piwigo 2.3.2
• piwigo piwigo 2.3.3
• piwigo piwigo 2.3.4
• piwigo piwigo 2.3.5
• piwigo piwigo 2.4.0
• piwigo piwigo 2.4.1
• piwigo piwigo 2.4.2
• piwigo piwigo 2.4.3
• piwigo piwigo 2.4.4
… and 1 more
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html archives.neohapsis.com
- http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html Exploit
- http://piwigo.org/bugs/view.php?id=0002844 piwigo.org
- http://piwigo.org/forum/viewtopic.php?id=21470 piwigo.org
- http://piwigo.org/releases/2.4.7 piwigo.org
- http://secunia.com/advisories/52228 Vendor Advisory
- http://www.exploit-db.com/exploits/24561 Exploit
- http://www.osvdb.org/90504 www.osvdb.org
- https://www.htbridge.com/advisory/HTB23144 Exploit
- http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html archives.neohapsis.com
- http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html Exploit
- http://piwigo.org/bugs/view.php?id=0002844 piwigo.org
- http://piwigo.org/forum/viewtopic.php?id=21470 piwigo.org
- http://piwigo.org/releases/2.4.7 piwigo.org
- http://secunia.com/advisories/52228 Vendor Advisory
- http://www.exploit-db.com/exploits/24561 Exploit
- http://www.osvdb.org/90504 www.osvdb.org
- https://www.htbridge.com/advisory/HTB23144 Exploit