PT-2022-23860 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: Piwigo version 12.3.0 Description: The issue is related to Cross Site Scripting XSS and can be exploited via the "/search/1940/created-monthly-list" API endpoint. This allows for malicious scripts to be injected into the website...

Piwigo <= 13.8.0 SQLi Vulnerability

Piwigo is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

Sql injection

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

CVE-2022-32297 affects Piwigo v12.2.0 and earlier, where the SQL injection vulnerability is triggered via the Search function. The OpenVAS/Red Hat/CVE entries corroborate a web-facing SQLi issue in Piwigo’s search path, with the root cause described as injectable payloads impacting the database. ...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A security vulnerability exists in Piwigo v12.2.0 and earlier versions. The vulnerability stems from the fact that an attacker can use...

Piwigo <= 11.5.0 RCE Vulnerability

Piwigo is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...

CVE-2021-40553

piwigo 11.5.0 is affected by a remote code execution RCE vulnerability in the LocalFiles Editor...

CVE-2021-40553

piwigo 11.5.0 is affected by a remote code execution RCE vulnerability in the LocalFiles Editor...

Remote code execution

piwigo 11.5.0 is affected by a remote code execution RCE vulnerability in the LocalFiles Editor...

CVE-2021-40553

piwigo 11.5.0 is affected by a remote code execution RCE vulnerability in the LocalFiles Editor...

CVE-2021-40553

CVE-2021-40553 affects piwigo 11.5.0 via the LocalFiles Editor and enables remote code execution. Multiple sources (NVD entry) describe a remote code execution vulnerability in the LocalFiles Editor for Piwigo 11.5.0, with CVSS indicators indicating high impact (C/H/I/A) in the 3.1 vector and a m...

Piwigo 代码注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A code injection vulnerability exists in Piwigo version 11.5.0, which can be exploited by an attacker to execute code...

PT-2022-11251 · Piwigo · Piwigo

Name of the Vulnerable Software and Affected Versions: piwigo version 11.5.0 Description: The issue is a remote code execution RCE vulnerability in the LocalFiles Editor. This allows for potential code execution on the affected system. Recommendations: For piwigo version 11.5.0, at the moment,...

Piwigo cross-site scripting vulnerability (CNVD-2022-59016)

Piwigo is a set of photo gallery software. The software includes features such as image management, image categorization and permission management. A cross-site scripting vulnerability exists in Piwigo version 11.5.0, which can be exploited by an attacker to execute JavaScript code on the client...

Piwigo <= 12.1.0 XSS Vulnerability

Piwigo is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

Piwigo <= 12.2.0 Multiple Vulnerabilities

Piwigo is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if description...