CVE-2016-10105
admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it c…
Published: 2017-01-03 · CVSS: Unscored
admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files. This can cause information disclosure and code execution if it contains a .. sequence.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7