| Package | Affected versions | Patched versions |
|---|---|---|
| dalbum | = 1.03= 1.04= 1.05= 1.06= 1.07= 1.08= 1.09= 1.10= 1.20= 1.21= 1.22= 1.3= 1.31= 1.32= 1.33= 1.34= 1.35≤ 1.44 |
Multiple cross-site request forgery (CSRF) vulnerabilities in photo/pass.php in DAlbum 1.44 build 174 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add a user via an add action, (2) change user passwords via a change action, or (3) delete a user via a delete action.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free