SecPod SCAP Repo, a repository of SCAP Content (CVE, CCE, CPE, CWE, OVAL and XCCDF)

Download | Alert*

CVE

CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the dl parameter.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 4.0
Exploit Score: 4.9
Impact Score: 4.9

CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: HIGH
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: PARTIAL

Reference:

http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html

EXPLOIT-DB-24561

http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html

http://piwigo.org/bugs/view.php?id=0002843

http://piwigo.org/forum/viewtopic.php?id=21470

http://piwigo.org/releases/2.4.7

http://www.zeroscience.mk/en/vulnerabilities/ZSL-2013-5127.php

https://www.htbridge.com/advisory/HTB23144


30479



423868



248364



909



195388



282