Description

Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.

Remediation

References

CVE-2013-1468

Related Vulnerabilities

WordPress Plugin WP Media Cleaner Multiple Cross-Site Scripting Vulnerabilities (2.2.6)

WordPress Plugin WordPress Download Manager 'cid' Parameter Cross-Site Scripting (2.2.2)

Ruby on Rails Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-3009)

WordPress Plugin WP-FaceThumb 'pagination_wp_facethumb' Parameter Cross-Site Scripting (0.1)

WordPress Plugin YITH WooCommerce Gift Cards Security Bypass (1.3.7)

Severity

High

Classification

CVE-2013-1468 CWE-352

Tags

Missing Update Known Vulnerabilities