adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-31 06:02:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

File Inclusion Attack #530

New Issue
Closed
opened 2026-10-05 00:02:23 +02:00 by adam · 2 comments
adam commented 2026-10-05 00:02:23 +02:00
Owner
Copy link
Copy source

Hello,

There is a File Inclusion attack in the file Piwigo/admin/batch_manager.php

It does:

600: $page['tab'] = 'global';  // if(isset($_GET)) else ,
596: $page['tab'] = $_GET['mode']; 
768: include (PHPWG_ROOT_PATH . 'admin/batch_manager_' . $page['tab'] . '.php');  // batch_manager_global.php

The user controlled variable $page['tab'] is being sent to an include() without no checks. this will create file inclusion attacks possible. in older php versions, using a nullbyte attack, a code execution is also possible.

Fix: put an array of allowed strings.

Thanks,

Hello, There is a File Inclusion attack in the file Piwigo/admin/batch_manager.php It does: ``` 600: $page['tab'] = 'global'; // if(isset($_GET)) else , 596: $page['tab'] = $_GET['mode']; 768: include (PHPWG_ROOT_PATH . 'admin/batch_manager_' . $page['tab'] . '.php'); // batch_manager_global.php ``` The user controlled variable $page['tab'] is being sent to an include() without no checks. this will create file inclusion attacks possible. in older php versions, using a nullbyte attack, a code execution is also possible. Fix: put an array of allowed strings. Thanks, <!-- github-sync-id:196306879 -->
adam closed this issue 2026-10-05 00:02:23 +02:00
adam commented 2026-10-05 00:02:24 +02:00
Author
Owner
Copy link
Copy source

use CVE-2016-10084

use CVE-2016-10084 <!-- github-comment-id:267974444 -->
adam commented 2026-10-05 00:02:25 +02:00
Author
Owner
Copy link
Copy source

A CVE? I admit I've never filled any. When a security issue is reported, the reporter sometimes gives us a CVE.

In my opinion this security issue is really minor because it requires to be administrator.

A CVE? I admit I've never filled any. When a security issue is reported, the reporter sometimes gives us a CVE. In my opinion this security issue is really minor because it requires to be administrator. <!-- github-comment-id:268252202 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#530