CVE

Id
61415  
CVE No.
CVE-2013-1468  
Status
Candidate  
Description
Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.  
Phase
Assigned (20130129)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
614684 61415 CVE-2013-1468 BUGTRAQ:20130227 Multiple Vulnerabilities in Piwigo  View
614685 61415 CVE-2013-1468 URL:http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html  View
614686 61415 CVE-2013-1468 EXPLOIT-DB:24561  View
614687 61415 CVE-2013-1468 URL:http://www.exploit-db.com/exploits/24561  View
614688 61415 CVE-2013-1468 MISC:http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html  View
614689 61415 CVE-2013-1468 MISC:https://www.htbridge.com/advisory/HTB23144  View
614690 61415 CVE-2013-1468 CONFIRM:http://piwigo.org/bugs/view.php?id=0002844  View
614691 61415 CVE-2013-1468 CONFIRM:http://piwigo.org/forum/viewtopic.php?id=21470  View
614692 61415 CVE-2013-1468 CONFIRM:http://piwigo.org/releases/2.4.7  View
614693 61415 CVE-2013-1468 OSVDB:90504  View
614694 61415 CVE-2013-1468 URL:http://www.osvdb.org/90504  View
614695 61415 CVE-2013-1468 SECUNIA:52228  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
19809 JVNDB-2013-001384 Oracle Java SE の Java Runtime Environment における Deployment の処理に関する脆弱性 Oracle Java SE の Java Runtime Environment (JRE) には、Deployment に関する処理に不備があるため、完全性に影響のある脆弱性が存在します。 CVE-2013-1473 61415 5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001384.html  View