CVE-2020-19215

SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=userperm...

CVE-2020-19213

SQL Injection vulnerability in catmove.php in piwigo v2.9.5, via the selection parameter to movecategories...

CVE-2023-34626

Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function...

PT-2023-24958 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 13.7.0 Description: The issue concerns SQL Injection via the Users function. Recommendations: For Piwigo version 13.7.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability...