Description

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the dl parameter.

Remediation

References

CVE-2013-1469

Related Vulnerabilities

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43500)

WordPress Plugin Good LMS-Learning Management System SQL Injection (2.1.4)

WordPress 3.4.1 Multiple Vulnerabilities (2.0 - 3.4.1)

WordPress Plugin Featured Comments Cross-Site Request Forgery (1.2.4)

PostgreSQL Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') Vulnerability (CVE-2020-21469)

Severity

Medium

Classification

CVE-2013-1469 CWE-22

Tags

Missing Update Known Vulnerabilities