1047 matches found
CVE-2021-40553
piwigo 11.5.0 is affected by a remote code execution RCE vulnerability in the LocalFiles Editor...
CVE-2021-40553
CVE-2021-40553 affects piwigo 11.5.0 via the LocalFiles Editor and enables remote code execution. Multiple sources (NVD entry) describe a remote code execution vulnerability in the LocalFiles Editor for Piwigo 11.5.0, with CVSS indicators indicating high impact (C/H/I/A) in the 3.1 vector and a m...
Piwigo 代码注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A code injection vulnerability exists in Piwigo version 11.5.0, which can be exploited by an attacker to execute code...
PT-2022-11251 · Piwigo · Piwigo
Name of the Vulnerable Software and Affected Versions: piwigo version 11.5.0 Description: The issue is a remote code execution RCE vulnerability in the LocalFiles Editor. This allows for potential code execution on the affected system. Recommendations: For piwigo version 11.5.0, at the moment,...
Piwigo cross-site scripting vulnerability (CNVD-2022-59016)
Piwigo is a set of photo gallery software. The software includes features such as image management, image categorization and permission management. A cross-site scripting vulnerability exists in Piwigo version 11.5.0, which can be exploited by an attacker to execute JavaScript code on the client...
Piwigo <= 12.2.0 Multiple Vulnerabilities
Piwigo is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if description...
Piwigo <= 12.1.0 XSS Vulnerability
Piwigo is prone to a cross-site scripting XSS vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...
Piwigo <= 11.5.0 XSS Vulnerability
Piwigo is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...
CVE-2021-40678
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batchmanager&mode=unit...
CVE-2021-40678
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batchmanager&mode=unit...
Cross site scripting
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batchmanager&mode=unit...
CVE-2021-40678
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batchmanager&mode=unit...
CVE-2021-40678
CVE-2021-40678 concerns Piwigo 11.5.0, where a persistent cross-site scripting (XSS) vulnerability exists in the single mode function via the URL path /admin.php?page=batch_manager&mode=unit. The connected documents consistently describe it as a client-side JavaScript execution risk reachable thr...
Piwigo 跨站脚本漏洞
Piwigo is a set of photo gallery software. The software includes features such as image management, image categorization and permission management. A cross-site scripting vulnerability exists in Piwigo version 11.5.0, which can be exploited by an attacker to execute JavaScript code on the client...
Piwigo SQL Injection Vulnerability (CNVD-2022-43223)
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. A SQL injection vulnerability exists in Piwigo version 11.5.0, which stems from a lack of validation of the id parameter in admin.php...
Piwigo SQL Injection (CVE-2020-19213)
An SQL injection vulnerability exists in Piwigo. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
Piwigo < 13.0.0 SQLi Vulnerability
Piwigo is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:piwigo:piwigo"; if...
CVE-2021-40317
Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter...
