CVE-2012-4525: XSS
Published Dec 2, 2019
·Updated
piwigo has XSS in password.php
Affected Software
3 affected components
debian/piwigo
Piwigo piwigo>=2.4.0<=2.4.3
Piwigo piwigo=2.3.1
Event History
Dec 2, 2019
CVE Published
via MITRE·05:46 PM
Data Sourced
via MITRE·05:46 PM
DescriptionWeakness
Aug 6, 2024
Data Sourced
via Debian·08:51 PM
DescriptionAffected Software
Frequently Asked Questions
1
What is CVE-2012-4525?
CVE-2012-4525 is a vulnerability in piwigo that allows for XSS (cross-site scripting) attacks in the password.php file.
2
How does CVE-2012-4525 affect piwigo?
CVE-2012-4525 affects piwigo versions 2.3.1 to 2.4.3, allowing for XSS attacks in the password.php file.
3
What is the severity of CVE-2012-4525?
The severity of CVE-2012-4525 is medium, with a CVSS score of 6.1.
4
How can I fix CVE-2012-4525?
To fix CVE-2012-4525, update piwigo to a version higher than 2.4.3 or apply the provided security patches.
5
Where can I find more information about CVE-2012-4525?
You can find more information about CVE-2012-4525 on the Debian security tracker and the Openwall mailing list.