https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 12:32:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-100159 EUVD-2026-100159 https://cve.radiocsirt.org/vuln/euvd-2026-100159 https://cve.radiocsirt.org/vuln/fkie_cve-2014-4614 <p>Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2014-4614 https://cve.radiocsirt.org/vuln/ghsa-whcg-w8gv-22hp <p>Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.</p> <p>Multiple cross-site request forgery (CSRF) vulnerabilities in Piwigo before 2.6.2 allow remote attackers to hijack the authentication of administrators for requests that use the (1) pwg.groups.addUser, (2) pwg.groups.deleteUser, (3) pwg.groups.setInfo, (4) pwg.users.setInfo, (5) pwg.permissions.add, or (6) pwg.permissions.remove method.</p> https://cve.radiocsirt.org/vuln/ghsa-whcg-w8gv-22hp https://cve.radiocsirt.org/vuln/gsd-2014-4614 gsd-2014-4614 https://cve.radiocsirt.org/vuln/gsd-2014-4614