Home > Vulnerability Database > CVE-2014-1980

Mend Vulnerability Database

CVE-2014-1980

Good to know:

Date: August 14, 2014

Cross-site scripting (XSS) vulnerability in include/functions_metadata.inc.php in Piwigo before 2.4.6 allows remote attackers to inject arbitrary web script or HTML via the Make field in IPTC Exif metadata within an image uploaded to the Community plugin.

Language: PHP

Severity Score

4.3

Related Resources (5)

Url: http://jvndb.jvn.jp/jvndb/JVNDB-2014-000092

Url: http://jvn.jp/en/jp/JVN80310172/index.html

Url: http://piwigo.org/bugs/view.php?id=2805

Url: https://nvd.nist.gov/vuln/detail/CVE-2014-1980

Url: https://www.mend.io/vulnerability-database/CVE-2014-1980

Severity Score

4.3

Weakness Type (CWE)

Cross-Site Scripting (XSS)

CWE-79

Top Fix

Upgrade Version

Upgrade to version 2.4.6

Learn More

CVSS v2

Base Score:	4.3
Access Vector (AV):	NETWORK
Access Complexity (AC):	MEDIUM
Authentication (AU):	NONE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Mend Vulnerability Database

We found results for “”

CVE-2014-1980

Good to know:

Date: August 14, 2014

Language: PHP

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?