CVE-2010-1707

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address parameters.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:N/I:P/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
VendorProductVersion
piwigopiwigo
𝑥
≤ 2.0.9
piwigopiwigo
1.0.0
piwigopiwigo
1.0.1
piwigopiwigo
1.0.2
piwigopiwigo
1.1.0
piwigopiwigo
1.2.0
piwigopiwigo
1.2.1
piwigopiwigo
1.3.0
piwigopiwigo
1.3.1
piwigopiwigo
1.3.2
piwigopiwigo
1.3.3
piwigopiwigo
1.3.4
piwigopiwigo
1.4.0
piwigopiwigo
1.4.1
piwigopiwigo
1.5.0
piwigopiwigo
1.5.1
piwigopiwigo
1.5.2
piwigopiwigo
1.6.0
piwigopiwigo
1.6.1
piwigopiwigo
1.6.2
piwigopiwigo
1.7.0
piwigopiwigo
1.7.1
piwigopiwigo
1.7.2
piwigopiwigo
1.7.3
piwigopiwigo
2.0.0
piwigopiwigo
2.0.1
piwigopiwigo
2.0.2
piwigopiwigo
2.0.3
piwigopiwigo
2.0.4
piwigopiwigo
2.0.5
piwigopiwigo
2.0.6
piwigopiwigo
2.0.7
piwigopiwigo
2.0.8
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
piwigo
maverick
Fixed 2.0.10-1
released
lucid
dne
karmic
dne
hardy
dne
dapper
dne