1047 matches found
CVE-2020-22150
A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...
CVE-2020-22148
CVE-2020-22148 affects Piwigo 2.10.1. The vulnerability is a stored cross-site scripting (XSS) in /admin.php?page=tags that allows attackers to execute arbitrary web scripts or HTML. This is described across multiple sources in the connected documents. No remediation details are provided in the g...
CVE-2020-22148
A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...
Piwigo 跨站脚本漏洞
Piwigo is a set of Web-based open source photo gallery software. Piwigo version 2.10.1 has a cross-site scripting vulnerability that allows attackers to execute arbitrary Web scripts or HTML...
Piwigo 跨站脚本漏洞
Piwigo is a set of Web-based open source image library software. Piwigo version 2.10.1 has a cross-site scripting vulnerability that allows attackers to execute arbitrary Web scripts or HTML...
Arbitrary File Read Vulnerability in Piwigo
Piwigo is an open source photo album program for the web. Piwigo suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...
Piwigo < 11.4.0 SQL Injection Vulnerability
Piwigo is prone to an SQL injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Piwigo < 11.5.0 SQL Injection Vulnerability
Piwigo is prone to an SQL injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Piwigo SQL Injection Vulnerability
Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in the order0dir parameter in admin/userlistbackend.php in Piwigo version 11.4.0. An attacker can exploit this vulnerability to obtain sensitive database information...
CVE-2021-32615
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
CVE-2021-32615
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
Sql injection
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
CVE-2021-32615
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
CVE-2021-32615
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
CVE-2021-32615
CVE-2021-32615 affects Piwigo 11.4.0 and is caused by an SQL injection in the admin/user_list_backend.php endpoint via the order[0][dir] parameter, potentially exposing sensitive database information. The core details come from multiple sources (NVD, CNVD/CNNVD, Red Hat, OSV, OpenVAS) confirming ...
Piwigo SQL注入漏洞
Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in the order0dir parameter in admin/userlistbackend.php in Piwigo version 11.4.0. An attacker can exploit this vulnerability to obtain sensitive database information...
Piwigo 11.3.0 - 'language' SQL
Exploit Title: Piwigo 11.3.0 - 'language' SQL Author: @nu11secur1ty Testing and Debugging: nu11secur1ty Date: 04.30.2021 Vendor: https://piwigo.org/ Link: https://github.com/Piwigo/Piwigo/releases/tag/11.3.0 CVE: CVE-2021-27973 + Exploit Source: !/usr/bin/python3 Author: @nu11secur1ty Debug:...
Piwigo 11.3.0 SQL Injection
Exploit Title: SQL injection in language parameter to admin.php?page=languages.on Piwigo 11.3.0 Author: @nu11secur1ty Testing and Debugging: nu11secur1ty Date: 04.30.2021 Vendor: https://piwigo.org/ Link: https://github.com/Piwigo/Piwigo/releases/tag/11.3.0 CVE: CVE-2021-27973 + Exploit Source:...
Piwigo 11.3.0 SQL Injection Exploit
Exploit Title: SQL injection in language parameter to admin.php?page=languages.on Piwigo 11.3.0 Testing and Debugging: nu11secur1ty Vendor: https://piwigo.org/ Link: https://github.com/Piwigo/Piwigo/releases/tag/11.3.0 CVE: CVE-2021-27973 + Exploit Source: !/usr/bin/python3 Author: @nu11secur1ty...
Code Execution Vulnerability in Piwigo
Piwigo is a web-based photo album software from the Piwigo team. A code execution vulnerability exists in Piwigo. A remote attacker can exploit this vulnerability to write arbitrary code and gain server privileges...