VULNERABILITY INTELLIGENCE

CVE-2013-1468

CVSS score7.6 HIGH
EPSS probability5.73%
CISA KEVNot currently listed
Published2013-03-14
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.

Weakness classification

  • CWE-352: Cross-Site Request Forgery (CSRF)

Primary references