1062 matches found
Piwigo 跨站脚本漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo v13.4.0, which stems from its identification.php component's manipulation of User-Agent that...
CVE-2022-48007
A stored cross-site scripting XSS vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent...
CVE-2022-48007
A stored cross-site scripting XSS vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent...
CVE-2022-48007
A stored cross-site scripting XSS vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent...
CVE-2022-48007
CVE-2022-48007 affects Piwigo, specifically a stored XSS in the identification.php component of Piwigo v13.4.0. The vulnerability exists when a crafted payload is injected into the User-Agent, enabling execution of arbitrary web scripts/HTML in a victim’s browser under the context of the affected...
CVE-2014-125053
A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is...
Sql injection
A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is...
CVE-2014-125053 Piwigo-Guest-Book Navigation Bar guestbook.inc.php sql injection
A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is...
CVE-2014-125053
Affected software: Piwigo-Guest-Book (up to version 1.3.0) with vulnerability in the Navigation Bar component. Root cause: manipulation of the start argument in include/guestbook.inc.php enables SQL injection. Impact: potential unauthorized access/manipulation via SQL injection; CVSS vectors in s...
PT-2023-10123 · Piwigo · Piwigo-Guest-Book
Name of the Vulnerable Software and Affected Versions: Piwigo-Guest-Book versions up to 1.3.0 Description: A critical issue affects the Navigation Bar component, specifically the include/guestbook.inc.php file. The manipulation of the start argument leads to sql injection. Recommendations: For...
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo Piwigo-Guest-Book version 1.3.0 and earlier versions suffer from a SQL injection vulnerability that stems from incorrect...
Piwigo <= 2.10.2 Multiple XSS Vulnerabilities
Piwigo is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Piwigo <= 12.3.0 XSS Vulnerability
Piwigo is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...
CVE-2022-37183
Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...
CVE-2022-37183
Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...
Cross site scripting
Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...
CVE-2022-37183
Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...
CVE-2022-37183
Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...
CVE-2022-37183
CVE-2022-37183 affects Piwigo 12.3.0 and is a cross-site scripting (XSS) vulnerability exploitable via the /search/1940/created-monthly-list endpoint. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, base score 6.1 (Medium); attack vector NETWORK, user interaction required, no ...
PT-2022-23860 · Piwigo · Piwigo
Name of the Vulnerable Software and Affected Versions: Piwigo version 12.3.0 Description: The issue is related to Cross Site Scripting XSS and can be exploited via the "/search/1940/created-monthly-list" API endpoint. This allows for malicious scripts to be injected into the website...