CVE-2020-19216

SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=groupperm...

CVE-2020-19215

CVE-2020-19215 describes a SQL injection in Piwigo v2.9.5, exploiting the admin/user_perm.php component via the cat_false parameter in admin.php?page=user_perm. The root cause is an injectable input handling within that admin page; impact is partial to high depending on the document’s CVSS data, ...

CVE-2020-19215

SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=userperm...

CVE-2020-19213

SQL Injection vulnerability in catmove.php in piwigo v2.9.5, via the selection parameter to movecategories...

CVE-2020-19213

CVE-2020-19213 affects Piwigo 2.9.5. The vulnerability is a SQL injection in cat_move.php via the selection parameter to move_categories. The flaw allows arbitrary SQL execution potentially impacting confidentiality, integrity, and availability as described in CVSS metrics (high to critical overa...

CVE-2020-19212

SQL Injection vulnerability in admin/grouplist.php in piwigo v2.9.5, via the group parameter to delete...

CVE-2020-19212

CVE-2020-19212 affects piwigo v2.9.5. The vulnerability is an SQL injection in admin/group_list.php, exploitable via the group parameter to delete, potentially enabling unauthorized deletion of groups. Detailed technical specifics are provided across multiple databases (e.g., NVD, RH, CNVD, OSV, ...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo 2.9.5 version of a security vulnerability , the vulnerability stems from catmove.php in the existence of SQL injection , an...

piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. piwigo admin/grouplist.php has a SQL injection vulnerability that can be exploited by attackers to delete via the group parameter...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/userperm.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via the...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/batchmanager.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via t...

Piwigo SQL注入漏洞

Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/userperm.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via the...

CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

CVE-2022-26266

Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php...

CVE-2022-26266

Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php...

CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

Design/Logic Flaw

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

Sql injection

Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php...

CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

CVE-2022-26267

CVE-2022-26267 affects Piwigo v12.2.0, with an information leak via the action parameter in /admin/maintenance_actions.php. The available connected records consistently describe Piwigo 12.2.0 as vulnerable to information disclosure through this endpoint; no exploit details or affected versions be...