Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2016-10105

Опубликовано: 03 янв. 2017
Источник: debian
EPSS Низкий

Описание

admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
piwigoremovedpackage

EPSS

Процентиль: 83%
0.02355
Низкий

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 9 лет назад

admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence.

CVSS3: 9.8
nvd
больше 9 лет назад

admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence.

CVSS3: 9.8
github
больше 4 лет назад

admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence.

EPSS

Процентиль: 83%
0.02355
Низкий