Vulnerability Database

316,080

Total vulnerabilities in the database

CVE-2017-17827

Piwigo 2.9.2 is vulnerable to Cross-Site Request Forgery via /admin.php?page=configuration&section=main or /admin.php?page=batch_manager&mode=unit. An attacker can exploit this to coerce an admin user into performing unintended actions.

  • Published: Dec 21, 2017
  • Updated: Nov 9, 2025
  • CVE: CVE-2017-17827
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 6.8
  • AV:N/AC:M/Au:N/C:P/I:P/A:P

CWEs:

Software From Fixed in
piwigo / piwigo 2.9.2 2.9.2.x