admin/languages.php in Piwigo through 2.8.3 allows remote authenticated administrators to conduct File Inclusion attacks via the tab parameter.
CVSS Score
7.2
EPSS Score
0.021
Published
2016-12-30
Page 4