CVE-2016-9751

Cross-site scripting (XSS) vulnerability in the search results front end in Piwigo 2.8.3 allows remote attackers to inject arbitrary web script or HTML via the search parameter.

• CWE-79

• http://www.securityfocus.com/bid/94637Third Party Advisory, VDB Entry
• https://github.com/Piwigo/Piwigo/issues/559Issue Tracking, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/94637Third Party Advisory, VDB Entry
• https://github.com/Piwigo/Piwigo/issues/559Issue Tracking, Patch, Third Party Advisory

Published

Dec 1, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9740IBM QRadar 7.2 could allow a remote attacker to consume all …
• CVE-2016-9746IBM Team Concert (RTC) 4.0, 5.0 and 6.0 is vulnerable to cro…
• CVE-2016-9747IBM RELM 4.0, 5.0 and 6.0 is vulnerable to cross-site script…
• CVE-2016-9748IBM Rational DOORS Next Generation 5.0 and 6.0 discloses sen…
• CVE-2016-9749IBM Campaign 9.1.0, 9.1.2, 10.0, and 10.1 could allow an aut…4
• CVE-2016-9750IBM QRadar 7.2 and 7.3 stores user credentials in plain in c…
• CVE-2016-9752In Serendipity before 2.0.5, an attacker can bypass SSRF pro…
• CVE-2016-9754The ring_buffer_resize function in kernel/trace/ring_buffer.…7.8
• CVE-2016-9755The netfilter subsystem in the Linux kernel before 4.9 misha…
• CVE-2016-9756arch/x86/kvm/emulate.c in the Linux kernel before 4.8.12 doe…
• CVE-2016-9757In the Create Tags page of the Rapid7 Nexpose version 6.4.12…
• CVE-2016-9758Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…