An open redirect vulnerability is present in Piwigo 2.9 and probably prior versions, allowing remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks. The identification.php component is affected by this issue: the "redirect" parameter is not validated.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
piwigo piwigo |
Vulmon