Логотип exploitDog
bind:CVE-2014-4614
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2014-4614

Количество 4

Количество 4

ubuntu логотип

CVE-2014-4614

больше 11 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.

CVSS2: 6.8
EPSS: Низкий
nvd логотип

CVE-2014-4614

больше 11 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.

CVSS2: 6.8
EPSS: Низкий
debian логотип

CVE-2014-4614

больше 11 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo b ...

CVSS2: 6.8
EPSS: Низкий
github логотип

GHSA-whcg-w8gv-22hp

больше 3 лет назад

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
ubuntu логотип
CVE-2014-4614

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.

CVSS2: 6.8
0%
Низкий
больше 11 лет назад
nvd логотип
CVE-2014-4614

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.

CVSS2: 6.8
0%
Низкий
больше 11 лет назад
debian логотип
CVE-2014-4614

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo b ...

CVSS2: 6.8
0%
Низкий
больше 11 лет назад
github логотип
GHSA-whcg-w8gv-22hp

Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.

0%
Низкий
больше 3 лет назад

Уязвимостей на страницу