CVE-2016-10084: High severity piwigo vulnerability
Published Dec 30, 2016
·Updated
admin/batchmanager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page['tab'] variable (aka the mode parameter).
Affected Software
1 affected component
Piwigo piwigo<=2.8.3
Remediation
Event History
Dec 30, 2016
CVE Published
via MITRE·07:08 AM
Data Sourced
via MITRE·07:08 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-10084?
CVE-2016-10084 is considered a medium-severity vulnerability due to its potential for remote file inclusion attacks.
2
How do I fix CVE-2016-10084?
To fix CVE-2016-10084, upgrade Piwigo to version 2.8.4 or later, which addresses the vulnerability.
3
Who is affected by CVE-2016-10084?
CVE-2016-10084 affects Piwigo versions prior to 2.8.4, specifically versions up to 2.8.3.
4
Can CVE-2016-10084 be exploited remotely?
Yes, CVE-2016-10084 can be exploited remotely by authenticated administrators.
5
What is the nature of the attack in CVE-2016-10084?
The attack in CVE-2016-10084 is a File Inclusion vulnerability that allows attackers to include arbitrary files.