CVE-2013-1468 [High] | CSRF in Piwigo

CVE-2013-1468 is rated High Exploit Risk (72.6/100): CVSS High severity, with high exploitation likelihood (EPSS 5.73%, 92th percentile). 4 public exploit reference(s) are indexed (Exploit-DB). Public exploits are available—assess exposure, apply mitigations, and prioritize patching.

EDB-ID	Source	Kind	Published	Link
24561	exploit_db	edb	2013-03-01	Exploit-DB ↗
—	nvd_ref	exploit_tag		Exploit-DB ↗
—	nvd_ref	exploit_tag		Exploit-DB ↗
—	nvd_ref	exploit_tag		Exploit-DB ↗

EDB-ID

Source

Kind

Published

Link

24561

exploit_db

edb

2013-03-01

Exploit-DB ↗

—

nvd_ref

exploit_tag

Exploit-DB ↗

—

nvd_ref

exploit_tag

Exploit-DB ↗

—

nvd_ref

exploit_tag

Exploit-DB ↗

#	Date	Old EPSS score	New EPSS score	Delta (New - Old)
1	2026-06-15	18.85%	5.73%	-13.12%
2	2025-03-30	15.61%	18.85%	+3.24%
3	2025-03-29	—	15.61%	—

Date

Old EPSS score

New EPSS score

Delta (New - Old)

2026-06-15

18.85%

5.73%

-13.12%

2025-03-30

15.61%

18.85%

+3.24%

2025-03-29

—

15.61%

—

Base score	Version	Severity	Vector	Exploitability	Impact	Score source
7.6	2.0	HIGH	`AV:N/AC:H/Au:N/C:C/I:C/A:C` Click to expand Access vector (AV:N) Can be exploited remotely over network reachability. Access complexity (AC:H) Exploitation requires uncommon or highly specific conditions. Authentication (AU:N) No authentication is required. Confidentiality impact (C:C) Complete confidentiality impact. Integrity impact (I:C) Complete integrity impact. Availability impact (A:C) Complete availability impact.	4.9	10.0	[email protected]

Base score

Version

Severity

Vector

Exploitability

Impact

Score source

7.6

2.0

HIGH

AV:N/AC:H/Au:N/C:C/I:C/A:C Click to expand

Access vector (AV:N): Can be exploited remotely over network reachability.
Access complexity (AC:H): Exploitation requires uncommon or highly specific conditions.
Authentication (AU:N): No authentication is required.
Confidentiality impact (C:C): Complete confidentiality impact.
Integrity impact (I:C): Complete integrity impact.
Availability impact (A:C): Complete availability impact.

4.9

10.0

[email protected]

OS Trackers for CVE-2013-1468

vendor	priority	summary	link
`ubuntu`	medium	CVE-2013-1468 medium priority: Ubuntu including 1 source packages (piwigo), 15 status rows across 15 suites (hardy, lucid, oneiric, precise, quantal, raring, saucy, trusty, upstream, utopic, vivid, wily, xenial, yakkety, zesty): DNE 11, ignored 3, needs-triage 1.	https://ubuntu.com/security/CVE-2013-1468

Affected software / configurations for CVE-2013-1468

Vendor	Product	Version	Raw CPE
piwigo	piwigo	<= 2.4.6	cpe:2.3:a:piwigo:piwigo::::::::
piwigo	piwigo	1.0.0	cpe:2.3:a:piwigo:piwigo:1.0.0:-::::::
piwigo	piwigo	1.0.1	cpe:2.3:a:piwigo:piwigo:1.0.1:::::::*
piwigo	piwigo	1.0.2	cpe:2.3:a:piwigo:piwigo:1.0.2:::::::*
piwigo	piwigo	1.1.0	cpe:2.3:a:piwigo:piwigo:1.1.0:::::::*
piwigo	piwigo	1.2.0	cpe:2.3:a:piwigo:piwigo:1.2.0:::::::*
piwigo	piwigo	1.2.1	cpe:2.3:a:piwigo:piwigo:1.2.1:::::::*
piwigo	piwigo	1.3.0	cpe:2.3:a:piwigo:piwigo:1.3.0:::::::*
piwigo	piwigo	1.3.1	cpe:2.3:a:piwigo:piwigo:1.3.1:::::::*
piwigo	piwigo	1.3.2	cpe:2.3:a:piwigo:piwigo:1.3.2:::::::*
piwigo	piwigo	1.3.3	cpe:2.3:a:piwigo:piwigo:1.3.3:::::::*
piwigo	piwigo	1.3.4	cpe:2.3:a:piwigo:piwigo:1.3.4:::::::*
piwigo	piwigo	1.4.0	cpe:2.3:a:piwigo:piwigo:1.4.0:::::::*
piwigo	piwigo	1.4.1	cpe:2.3:a:piwigo:piwigo:1.4.1:::::::*
piwigo	piwigo	1.5.0	cpe:2.3:a:piwigo:piwigo:1.5.0:::::::*
piwigo	piwigo	1.5.1	cpe:2.3:a:piwigo:piwigo:1.5.1:::::::*
piwigo	piwigo	1.5.2	cpe:2.3:a:piwigo:piwigo:1.5.2:::::::*
piwigo	piwigo	1.6.0	cpe:2.3:a:piwigo:piwigo:1.6.0:::::::*
piwigo	piwigo	1.6.1	cpe:2.3:a:piwigo:piwigo:1.6.1:::::::*
piwigo	piwigo	1.6.2	cpe:2.3:a:piwigo:piwigo:1.6.2:::::::*
piwigo	piwigo	1.7.0	cpe:2.3:a:piwigo:piwigo:1.7.0:::::::*
piwigo	piwigo	1.7.1	cpe:2.3:a:piwigo:piwigo:1.7.1:::::::*
piwigo	piwigo	1.7.2	cpe:2.3:a:piwigo:piwigo:1.7.2:::::::*
piwigo	piwigo	1.7.3	cpe:2.3:a:piwigo:piwigo:1.7.3:::::::*
piwigo	piwigo	2.0	cpe:2.3:a:piwigo:piwigo:2.0:::::::*
piwigo	piwigo	2.0.0	cpe:2.3:a:piwigo:piwigo:2.0.0:::::::*
piwigo	piwigo	2.0.1	cpe:2.3:a:piwigo:piwigo:2.0.1:::::::*
piwigo	piwigo	2.0.2	cpe:2.3:a:piwigo:piwigo:2.0.2:::::::*
piwigo	piwigo	2.0.3	cpe:2.3:a:piwigo:piwigo:2.0.3:::::::*
piwigo	piwigo	2.0.4	cpe:2.3:a:piwigo:piwigo:2.0.4:::::::*
piwigo	piwigo	2.0.5	cpe:2.3:a:piwigo:piwigo:2.0.5:::::::*
piwigo	piwigo	2.0.6	cpe:2.3:a:piwigo:piwigo:2.0.6:::::::*
piwigo	piwigo	2.0.7	cpe:2.3:a:piwigo:piwigo:2.0.7:::::::*
piwigo	piwigo	2.0.8	cpe:2.3:a:piwigo:piwigo:2.0.8:::::::*
piwigo	piwigo	2.0.9	cpe:2.3:a:piwigo:piwigo:2.0.9:::::::*
piwigo	piwigo	2.0.10	cpe:2.3:a:piwigo:piwigo:2.0.10:::::::*
piwigo	piwigo	2.1.0	cpe:2.3:a:piwigo:piwigo:2.1.0:::::::*
piwigo	piwigo	2.1.1	cpe:2.3:a:piwigo:piwigo:2.1.1:::::::*
piwigo	piwigo	2.1.2	cpe:2.3:a:piwigo:piwigo:2.1.2:::::::*
piwigo	piwigo	2.1.3	cpe:2.3:a:piwigo:piwigo:2.1.3:::::::*
piwigo	piwigo	2.1.4	cpe:2.3:a:piwigo:piwigo:2.1.4:::::::*
piwigo	piwigo	2.1.5	cpe:2.3:a:piwigo:piwigo:2.1.5:::::::*
piwigo	piwigo	2.1.6	cpe:2.3:a:piwigo:piwigo:2.1.6:::::::*
piwigo	piwigo	2.2.0	cpe:2.3:a:piwigo:piwigo:2.2.0:::::::*
piwigo	piwigo	2.2.1	cpe:2.3:a:piwigo:piwigo:2.2.1:::::::*
piwigo	piwigo	2.2.2	cpe:2.3:a:piwigo:piwigo:2.2.2:::::::*
piwigo	piwigo	2.2.3	cpe:2.3:a:piwigo:piwigo:2.2.3:::::::*
piwigo	piwigo	2.2.4	cpe:2.3:a:piwigo:piwigo:2.2.4:::::::*
piwigo	piwigo	2.2.5	cpe:2.3:a:piwigo:piwigo:2.2.5:::::::*
piwigo	piwigo	2.3.0	cpe:2.3:a:piwigo:piwigo:2.3.0:::::::*
piwigo	piwigo	2.3.1	cpe:2.3:a:piwigo:piwigo:2.3.1:::::::*
piwigo	piwigo	2.3.2	cpe:2.3:a:piwigo:piwigo:2.3.2:::::::*
piwigo	piwigo	2.3.3	cpe:2.3:a:piwigo:piwigo:2.3.3:::::::*
piwigo	piwigo	2.3.4	cpe:2.3:a:piwigo:piwigo:2.3.4:::::::*
piwigo	piwigo	2.3.5	cpe:2.3:a:piwigo:piwigo:2.3.5:::::::*
piwigo	piwigo	2.4.0	cpe:2.3:a:piwigo:piwigo:2.4.0:::::::*
piwigo	piwigo	2.4.1	cpe:2.3:a:piwigo:piwigo:2.4.1:::::::*
piwigo	piwigo	2.4.2	cpe:2.3:a:piwigo:piwigo:2.4.2:::::::*
piwigo	piwigo	2.4.3	cpe:2.3:a:piwigo:piwigo:2.4.3:::::::*
piwigo	piwigo	2.4.4	cpe:2.3:a:piwigo:piwigo:2.4.4:::::::*
piwigo	piwigo	2.4.5	cpe:2.3:a:piwigo:piwigo:2.4.5:::::::*

References for CVE-2013-1468

URL	Tags
http://archives.neohapsis.com/archives/bugtraq/2013-02/0153.html
http://packetstormsecurity.com/files/120592/Piwigo-2.4.6-Cross-Site-Request-Forgery-Traversal.html	Exploit
http://piwigo.org/bugs/view.php?id=0002844
http://piwigo.org/forum/viewtopic.php?id=21470
http://piwigo.org/releases/2.4.7
http://secunia.com/advisories/52228	Vendor Advisory
http://www.exploit-db.com/exploits/24561	Exploit
http://www.osvdb.org/90504
https://www.htbridge.com/advisory/HTB23144	Exploit

URL

CVE-2013-1468

Public exploit references (Exploit-DB) for CVE-2013-1468

Exploit prediction scoring system (EPSS) score for CVE-2013-1468

Common vulnerability scoring system (CVSS) metrics for CVE-2013-1468

Weakness enumeration for CVE-2013-1468

OS Trackers for CVE-2013-1468

Affected software / configurations for CVE-2013-1468

References for CVE-2013-1468