CVE-2013-1468: CSRF
Cross-site request forgery (CSRF) vulnerability in the LocalFiles Editor plugin in Piwigo before 2.4.7 allows remote attackers to hijack the authentication of administrators for requests that create arbitrary PHP files via unspecified vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1468?
CVE-2013-1468 is classified as a medium severity vulnerability, primarily impacting the LocalFiles Editor plugin in Piwigo prior to version 2.4.7.
How do I fix CVE-2013-1468?
To resolve CVE-2013-1468, upgrade the Piwigo installation to version 2.4.7 or later.
Which versions of Piwigo are affected by CVE-2013-1468?
CVE-2013-1468 affects all versions of Piwigo before 2.4.7, including versions 1.0.0 through 2.4.6.
What type of vulnerability is CVE-2013-1468?
CVE-2013-1468 is a cross-site request forgery (CSRF) vulnerability, allowing attackers to perform unauthorized actions on behalf of administrators.
What can an attacker exploit in CVE-2013-1468?
An attacker could exploit CVE-2013-1468 to hijack administrator authentication and create arbitrary PHP files through the LocalFiles Editor plugin.