EUVD-2021-27850

Malicious code in bioql PyPI...

CVE-2021-40313

CVE-2021-40313 affects Piwigo v11.5, with a SQL injection vulnerability in the pwg_token parameter of /admin/batch_manager_global.php. The issue is caused by insufficient escaping/ filtering, as reported across sources (NVD entry and Red Hat/CVE references). Impact is described as SQL injection w...

PT-2021-22858

Name of the Vulnerable Software and Affected Versions Piwigo version 11.5 Description A SQL injection issue was found in Piwigo via the pwg token parameter in the "/admin/batch manager global.php" API endpoint. This allows for potential SQL injection attacks. Recommendations For Piwigo version...

PT-2017-15029

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue concerns SQL Injection in the Batch Manager component of Piwigo. Specifically, the element ids parameter in the "admin/batch manager unit.php" endpoint is vulnerable when in unit mode. This allows an...

Piwigo File Containment Vulnerability

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. A security vulnerability exists in the admin/batchmanager.php file in Piwigo 2.8.3 and earlier versions. A remote attacke...