Description

Cross-site scripting (XSS) vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote attackers to inject arbitrary web script or HTML via the page parameter to admin.php.

Remediation

References

CVE-2015-2034

Related Vulnerabilities

WordPress Plugin bodi0`s Easy cache Cross-Site Scripting (0.8)

WordPress Plugin WP-PostViews Cross-Site Request Forgery (1.62)

phpBB Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-6506)

MySQL CVE-2015-4816 Vulnerability (CVE-2015-4816)

Nexus Repository Manager Incorrect Authorization Vulnerability (CVE-2018-16620)

Severity

Medium

Classification

CVE-2015-2034 CWE-707

Tags

Missing Update Known Vulnerabilities