28472 matches found
CVE-2026-27634
CVE-2026-27634 affects Piwigo prior to 16.3.0, where four date-filter parameters (f_min_date_available, f_max_date_available, f_min_date_created, f_max_date_created) in ws_std_image_sql_filter() are concatenated into SQL without escaping or type validation. This allows a pre-auth SQL injection th...
CVE-2026-27634 Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter
Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...
CVE-2026-27634 Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filter
Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, the four date filter parameters fmindateavailable, fmaxdateavailable, fmindatecreated, fmaxdatecreated in wsstdimagesqlfilter are concatenated directly into SQL without any escaping or type validation. This...
GHSA-8PRR-286P-4W7J
creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...
GHSA-67JX-R9PV-98RJ
creationtimestamp| type| source ---|---|--- 2026-04-03 19:24:00+00:00| published-proof-of-concept| Telegram/l2CWtN20f6D8WOiAClhqJgrdc6BQljDZCBDw2ZgpHM67Hss...
GHSA-GP5X-2V54-V2Q5
creationtimestamp| type| source ---|---|--- 2026-04-03 17:26:47+00:00| published-proof-of-concept| Telegram/CfZ2Rt5oDMh5hfP6-7c66YyHAz2lNtcnTrevEl4rY2ivCc...
CVE-2026-31404
creationtimestamp| type| source ---|---|--- 2026-04-03 16:07:15+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim43ex3js2i 2026-05-31 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/suse-linux-kernel-multiple-vulnerabilities20260601...
CVE-2026-31399
creationtimestamp| type| source ---|---|--- 2026-04-03 16:00:43+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mim3pp62gd2j 2026-05-05 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities20260506 2026-08-03 05:51:36+00:00| seen...
CVE-2026-23136
creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:19+00:00| seen| Telegram/GirSXfYk6qmo0VkezaSMDEKvqn4iGVO7FR9G1cahi8frg 2026-05-07 14:35:11+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mlbgryvtcx2q 2026-05-07 20:00:00+00:00| seen|...
CVE-2026-23139
creationtimestamp| type| source ---|---|--- 2026-04-03 15:22:19+00:00| seen| Telegram/GirSXfYk6qmo0VkezaSMDEKvqn4iGVO7FR9G1cahi8frg 2026-05-07 20:00:00+00:00| seen| https://www.hkcert.org/security-bulletin/redhat-linux-kernel-multiple-vulnerabilities20260508 2026-06-01 18:00:00+00:00| seen|...
CVE-2026-25773
creationtimestamp| type| source ---|---|--- 2026-04-03 14:40:40+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3milxakmfkh2t 2026-04-03 15:23:03+00:00| seen| Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec 2026-04-03 15:23:07+00:00| published-proof-of-concept|...
CVE-2026-28703
creationtimestamp| type| source ---|---|--- 2026-04-03 12:54:32+00:00| seen| https://bsky.app/profile/postac001.bsky.social/post/3milrcr5y3m2o 2026-04-03 13:19:05+00:00| seen| Telegram/YV8cS3UbatxDTGe0fjayhbeNknefcE-s36BQ9lt853A06hI...
CVE-2026-28815
creationtimestamp| type| source ---|---|--- 2026-04-03 04:20:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikulke5wj2d 2026-04-03 15:23:03+00:00| seen| Telegram/DMrtbPbyVuvJyzUNlrr2TA99ljgvsTw1ZTHgoXyjyFD12Ec 2026-04-04 07:00:31+00:00| seen|...
CVE-2026-3971
creationtimestamp| type| source ---|---|--- 2026-04-03 01:20:09+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mikkj3j7tb2a...
CVE-2026-32213
creationtimestamp| type| source ---|---|--- 2026-04-03 01:05:19+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikjolecgh24 2026-04-03 01:16:28+00:00| seen| Telegram/iJ-TXq8dDjuzcBmcTa4J1ArjLXeEo9DZvpPvRg0iyulgok 2026-04-03 02:32:29+00:00| seen|...
CVE-2026-33107
creationtimestamp| type| source ---|---|--- 2026-04-03 00:55:18+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mikj4o3z2y2q 2026-04-03 01:16:28+00:00| seen| Telegram/iJ-TXq8dDjuzcBmcTa4J1ArjLXeEo9DZvpPvRg0iyulgok 2026-04-03 04:30:28+00:00| seen|...
Piwigo SQL injection vulnerability
Piwigo is a web-based open-source image library software developed by Piwigo contributors. This software includes functions such as image management, image classification, and permission management. Versions of Piwigo prior to 16.3.0 had a SQL injection vulnerability. This vulnerability stemmed...
GHSA-7FG7-WX5Q-6M3V
creationtimestamp| type| source ---|---|--- 2026-04-02 22:23:12+00:00| published-proof-of-concept| Telegram/qg3HF91OLRRzWQbI7Pfv-fl8vLkHd7iL-mBbLD40slyOww...