CVE-2016-10084

admin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page['tab'] variable (aka…

published December 30, 2016

CVSS
—
EPSS
2%
Percentile
78.7
In the wild
Unconfirmed
What it is

admin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page['tab'] variable (aka the mode parameter).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01837 · 78.7th percentile
Published
2016-12-30T07:08Z
EPSS history
Timeline
  • 30 DEC 07:08Z
    admin/batch_manager.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the $page['tab'] variable (aka…
    cvelistv5