CVE-2013-1469

Directory traversal vulnerability in install.php in Piwigo before 2.4.7 allows remote attackers to read and delete arbitrary files via a .. (dot dot) in the dl parameter.

CVSS v2.0

4.0 MEDIUMAV:N/AC:H/Au:N/C:P/I:N/A:P

EPSS

56.01% chance of exploitation in the next 30 days, 99th percentile

Published

2013-03-13

Updated

2024-09-17

Proof-of-concept exploits (1)

• http://www.exploit-db.com/exploits/24561

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/24561
• https://www.exploit-db.com/exploits/24520

References

• CVE Record
• NVD entry

Related

• CVE-2013-1468
• CVE-2013-1471
• CVE-2013-1466
• CVE-2013-1488
• CVE-2013-1465
• CVE-2013-1491