adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

Bug Report #649

New Issue
Closed
opened 2026-10-05 00:09:06 +02:00 by adam · 6 comments
adam commented 2026-10-05 00:09:06 +02:00
Owner
Copy link
Copy source

Issue on Photo Edit

After upload an image, an administrator can edit their metadata as Title, Author, etc.

The image editor is similar to this URL /piwigo/admin.php?page=photo-5 where the number is an Image ID, the application does not validate strings passed to page parameter been possible to retrieve some files from the server similar to a Local File Inclusion.

# **Issue on Photo Edit** After upload an image, an administrator can edit their metadata as Title, Author, etc. The image editor is similar to this URL /piwigo/admin.php?page=photo-5 where the number is an Image ID, the application does not validate strings passed to page parameter been possible to retrieve some files from the server similar to a Local File Inclusion. <!-- github-sync-id:234358192 -->
adam closed this issue 2026-10-05 00:09:06 +02:00
adam commented 2026-10-05 00:09:07 +02:00
Author
Owner
Copy link
Copy source

why did you publish that?!?

why did you publish that?!? <!-- github-comment-id:306940777 -->
adam commented 2026-10-05 00:09:08 +02:00
Author
Owner
Copy link
Copy source

Where can I send you a complete detail?

Where can I send you a complete detail? <!-- github-comment-id:306941631 -->
adam commented 2026-10-05 00:09:09 +02:00
Author
Owner
Copy link
Copy source

Thank you

did you use the contact form?
team at piwigo.org works too (any team user at piwigo.org also)

Thank you did you use the contact form? team at piwigo.org works too (any team user at piwigo.org also) <!-- github-comment-id:306941969 -->
adam commented 2026-10-05 00:09:09 +02:00
Author
Owner
Copy link
Copy source

I was looking for a direct contact but this ok, thanks

I was looking for a direct contact but this ok, thanks <!-- github-comment-id:306942312 -->
adam commented 2026-10-05 00:09:10 +02:00
Author
Owner
Copy link
Copy source

well a email couldn't be more direct?!

well a email couldn't be more direct?! <!-- github-comment-id:306942484 -->
adam commented 2026-10-05 00:09:11 +02:00
Author
Owner
Copy link
Copy source

yep (:

yep (: <!-- github-comment-id:306943168 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#649