Lucene search
K

7 matches found

RedhatCVE
RedhatCVE
added 2026/04/04 10:54 p.m.3 views

CVE-2026-27834

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability exists in the pwg.users.getList Web Service API method. The filter parameter is directly concatenated into a SQL query without proper sanitization, allowing authenticated...

7.2CVSS6.1AI score0.0005EPSS
Exploits1References1
NVD
NVD
added 2026/04/03 10:16 p.m.0 views

CVE-2026-27834

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability exists in the pwg.users.getList Web Service API method. The filter parameter is directly concatenated into a SQL query without proper sanitization, allowing authenticated...

7.2CVSS0.0005EPSS
Exploits1References3
EUVD
EUVD
added 2026/04/03 9:35 p.m.1 views

EUVD-2026-18872

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability exists in the pwg.users.getList Web Service API method. The filter parameter is directly concatenated into a SQL query without proper sanitization, allowing authenticated...

7.2CVSS6.1AI score0.0005EPSS
Exploits1References3
Cvelist
Cvelist
added 2026/04/03 9:35 p.m.12 views

CVE-2026-27834 Piwigo: SQL Injection in pwg.users.getList API Method via filter Parameter

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability exists in the pwg.users.getList Web Service API method. The filter parameter is directly concatenated into a SQL query without proper sanitization, allowing authenticated...

7.2CVSS0.0005EPSS
Exploits1References3
CVE
CVE
added 2026/04/03 9:35 p.m.5 views

CVE-2026-27834

CVE-2026-27834 affects Piwigo prior to 16.3.0, where the pwg.users.getList Web Service API method is vulnerable to SQL Injection. The filter parameter is directly concatenated into a SQL query without proper sanitization, enabling authenticated administrators to execute arbitrary SQL commands. Th...

7.2CVSS6.1AI score0.0005EPSS
Exploits1References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/04/03 9:35 p.m.0 views

CVE-2026-27834

Piwigo is an open source photo gallery application for the web. Prior to version 16.3.0, a SQL Injection vulnerability exists in the pwg.users.getList Web Service API method. The filter parameter is directly concatenated into a SQL query without proper sanitization, allowing authenticated...

7.2CVSS6.1AI score0.0005EPSS
Exploits1References4Affected Software1
CNNVD
CNNVD
added 2026/04/03 12:0 a.m.4 views

Piwigo 安全漏洞

Piwigo is a web-based open-source image library software developed by Piwigo contributors. This software includes functions such as image management, image classification, and permission management. Versions of Piwigo prior to 16.3.0 contained security vulnerabilities. These vulnerabilities stemm...

7.2CVSS6.1AI score0.0005EPSS
Exploits1References3
Rows per page
Query Builder