CVE-2010-1707

Published: May 4, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Multiple cross-site scripting (XSS) vulnerabilities in register.php in Piwigo 2.0.9 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) login and (2) mail_address parameters.

Affected (33)

Products: Piwigo: Piwigo

Piwigo

1 product

Piwigo

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Piwigo Piwigo	Up to 2.0.9
Piwigo Piwigo	Version 1.0.0
Piwigo Piwigo	Version 1.0.1
Piwigo Piwigo	Version 1.0.2
Piwigo Piwigo	Version 1.1.0
Piwigo Piwigo	Version 1.2.0
Piwigo Piwigo	Version 1.2.1
Piwigo Piwigo	Version 1.3.0
Piwigo Piwigo	Version 1.3.1
Piwigo Piwigo	Version 1.3.2
Piwigo Piwigo	Version 1.3.3
Piwigo Piwigo	Version 1.3.4
Piwigo Piwigo	Version 1.4.0
Piwigo Piwigo	Version 1.4.1
Piwigo Piwigo	Version 1.5.0
Piwigo Piwigo	Version 1.5.1
Piwigo Piwigo	Version 1.5.2
Piwigo Piwigo	Version 1.6.0
Piwigo Piwigo	Version 1.6.1
Piwigo Piwigo	Version 1.6.2
Piwigo Piwigo	Version 1.7.0
Piwigo Piwigo	Version 1.7.1
Piwigo Piwigo	Version 1.7.2
Piwigo Piwigo	Version 1.7.3
Piwigo Piwigo	Version 2.0.0
Piwigo Piwigo	Version 2.0.1
Piwigo Piwigo	Version 2.0.2
Piwigo Piwigo	Version 2.0.3
Piwigo Piwigo	Version 2.0.4
Piwigo Piwigo	Version 2.0.5
Piwigo Piwigo	Version 2.0.6
Piwigo Piwigo	Version 2.0.7
Piwigo Piwigo	Version 2.0.8