Description

Cross-site request forgery (CSRF) vulnerability in the administration panel in Piwigo before 2.6.2 allows remote attackers to hijack the authentication of administrators for requests that add users via a pwg.users.add action in a request to ws.php.

Remediation

References

CVE-2014-4613

Related Vulnerabilities

Internet Information Services Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2002-0419)

Squid Permissions, Privileges, and Access Controls Vulnerability (CVE-2015-5400)

Nginx buffer underflow vulnerability

OpenVPN AS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-3824)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1831)

Severity

Medium

Classification

CVE-2014-4613 CWE-352 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Tags

Missing Update Known Vulnerabilities