CVE-2022-37183

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

CVE-2022-37183

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

Cross site scripting

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

CVE-2022-37183

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

CVE-2022-37183

CVE-2022-37183 affects Piwigo 12.3.0 and is a cross-site scripting (XSS) vulnerability exploitable via the /search/1940/created-monthly-list endpoint. The NVD entry lists CVSS v3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N, base score 6.1 (Medium); attack vector NETWORK, user interaction required, no ...

CVE-2022-37183

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

Piwigo 跨站脚本漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo version 12.3.0, which stems from vulnerability to cross-site scripting XSS attacks via...

PT-2022-23860 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 12.3.0 Description: The issue is related to Cross Site Scripting XSS and can be exploited via the "/search/1940/created-monthly-list" API endpoint. This allows for malicious scripts to be injected into the website...

Piwigo <= 13.8.0 SQLi Vulnerability

Piwigo is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

Sql injection

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

CVE-2022-32297 affects Piwigo v12.2.0 and earlier, where the SQL injection vulnerability is triggered via the Search function. The OpenVAS/Red Hat/CVE entries corroborate a web-facing SQLi issue in Piwigo’s search path, with the root cause described as injectable payloads impacting the database. ...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo v12.2.0 and earlier versions. The vulnerability stems from the fact that an attacker can use...

Piwigo <= 11.5.0 RCE Vulnerability

Piwigo is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...

CVE-2021-40553

piwigo 11.5.0 is affected by a remote code execution RCE vulnerability in the LocalFiles Editor...

CVE-2021-40553

piwigo 11.5.0 is affected by a remote code execution RCE vulnerability in the LocalFiles Editor...

Remote code execution

piwigo 11.5.0 is affected by a remote code execution RCE vulnerability in the LocalFiles Editor...