CVE-2013-1468

Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.

CVSS v2.0

7.6 HIGHAV:N/AC:H/Au:N/C:C/I:C/A:C

EPSS

5.73% chance of exploitation in the next 30 days, 93th percentile

Published

2013-03-12

Updated

2024-09-16

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/24561

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/24561

References

• CVE Record
• NVD entry

Related

• CVE-2013-1466
• CVE-2013-1469
• CVE-2013-1465
• CVE-2013-1471
• CVE-2013-1464
• CVE-2013-1488