CVE-2023-37270 Piwigo SQL Injection vulnerability in "User-Agent"

🗓️ 07 Jul 2023 21:26:28Reported by GoogleType

osv🔗 osv.dev👁 19 Views

Prior to version 13.8.0, Piwigo open source photo gallery software has a SQL Injection vulnerability in the administrator login, potentially allowing unauthorized access to execute arbitrary SQL statements and leak database information

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-37270	8 Jul 202311:39	–	circl
CNNVD	Piwigo SQL注入漏洞	7 Jul 202300:00	–	cnnvd
CNVD	Piwigo SQL Injection Vulnerability (CNVD-2023-58825)	11 Jul 202300:00	–	cnvd
CVE	CVE-2023-37270	7 Jul 202321:26	–	cve
Cvelist	CVE-2023-37270 Piwigo SQL Injection vulnerability in "User-Agent"	7 Jul 202321:26	–	cvelist
Nuclei	Piwigo 13.7.0 - SQL Injection	8 Jun 202604:09	–	nuclei
NVD	CVE-2023-37270	7 Jul 202322:15	–	nvd
OpenVAS	Piwigo < 13.8.0 SQLi Vulnerability	10 Jul 202300:00	–	openvas
Prion	Sql injection	7 Jul 202322:15	–	prion
RedhatCVE	CVE-2023-37270	23 May 202503:28	–	redhatcve

Source	Link
github	www.github.com/Piwigo/Piwigo/blob/c01ec38bc43f09424a8d404719c35f963d63cf00/include/dblayer/functions_mysqli.inc.php
github	www.github.com/Piwigo/Piwigo/blob/c01ec38bc43f09424a8d404719c35f963d63cf00/include/functions.inc.php
piwigo	www.piwigo.org/release-13.8.0
github	www.github.com/CVEProject/cvelistV5/tree/main/cves/2023/37xxx/CVE-2023-37270.json
github	www.github.com/Piwigo/Piwigo/security/advisories/GHSA-934w-qj9p-3qcx
nvd	www.nvd.nist.gov/vuln/detail/CVE-2023-37270
github	www.github.com/Piwigo/Piwigo/commit/978425527d6c113887f845d75cf982bbb62d761a

10 Apr 2026 05:00Current

9High risk

Vulners AI Score9

CVSS 3.17.6

EPSS0.59212