Description

admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter.

Remediation

References

CVE-2016-10085

Related Vulnerabilities

Joomla Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2022-23794)

MySQL Improper Access Control Vulnerability (CVE-2015-3152)

WordPress Plugin Answer My Question Multiple Cross-Site Scripting Vulnerabilities (1.1)

Internet Information Services Other Vulnerability (CVE-2001-1243)

Oracle JRE CVE-2013-2442 Vulnerability (CVE-2013-2442)

Severity

High

Classification

CVE-2016-10085 CWE-284 CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities