EUVD-2016-4748

Malware in sbrugna...

CVE-2024-48311

Piwigo v14.5.0 was discovered to contain a Cross-Site Request Forgery CSRF via the Edit album function...

PT-2024-22505 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo versions prior to 14.3.0 Description: A Cross Site Scripting issue exists due to missing sanitization in the create tag function in admin/include/functions.php. Recommendations: For versions prior to 14.3.0, update to version 14.3.0 or...

PT-2024-14293 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: piwigo version 14.0.0 Description: A Cross Site Scripting issue allows a remote attacker to obtain sensitive information via the lang parameter in the Admin Tools plug-in component. Recommendations: For piwigo version 14.0.0, consider...

Piwigo SQL Injection Vulnerability (CNVD-2023-58825)

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A SQL injection vulnerability exists in Piwigo prior to version 13.8.0. The vulnerability stems from the application's lack of...

Piwigo SQL Injection Vulnerability

Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in the order0dir parameter in admin/userlistbackend.php in Piwigo version 11.4.0. An attacker can exploit this vulnerability to obtain sensitive database information...