Sql injection

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwgtoken in /admin/batchmanagerglobal.php...

CVE-2021-40313

CVE-2021-40313 affects Piwigo v11.5, with a SQL injection vulnerability in the pwg_token parameter of /admin/batch_manager_global.php. The issue is caused by insufficient escaping/ filtering, as reported across sources (NVD entry and Red Hat/CVE references). Impact is described as SQL injection w...

CVE-2021-40313

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwgtoken in /admin/batchmanagerglobal.php...

Piwigo SQL注入漏洞

Piwigo is a set of Web-based open source image library software. Piwigo v11.5 contains a security vulnerability in /admin/batchmanagerglobal.php in which the parameter pwgtoken is not sufficiently escaped and filtered. No details of the vulnerability are available at this time...

Piwigo Cross-Site Scripting Vulnerability (CNVD-2021-54383)

Piwigo is a set of Web-based open source photo gallery software. Piwigo version 2.10.1 has a cross-site scripting vulnerability that allows attackers to execute arbitrary Web scripts or HTML...

Piwigo Cross-Site Scripting Vulnerability (CNVD-2021-54382)

Piwigo is a set of Web-based open source image library software. Piwigo version 2.10.1 has a cross-site scripting vulnerability that allows attackers to execute arbitrary Web scripts or HTML...

CVE-2020-22148

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22150

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22150

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22148

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

Cross site scripting

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22150

A cross site scripting XSS vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-22150

CVE-2020-22150 describes a cross-site scripting (XSS) vulnerability in Piwigo 2.10.1, specifically in /admin.php?page=permalinks, allowing execution of arbitrary web scripts or HTML. Connected sources corroborate XSS in Piwigo and indicate variants affecting Piwigo up to 2.10.2 (OpenVAS listing)....

CVE-2020-22148

CVE-2020-22148 affects Piwigo 2.10.1. The vulnerability is a stored cross-site scripting (XSS) in /admin.php?page=tags that allows attackers to execute arbitrary web scripts or HTML. This is described across multiple sources in the connected documents. No remediation details are provided in the g...

CVE-2020-22148

A stored cross site scripting XSS vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML...

Piwigo 跨站脚本漏洞

Piwigo is a set of Web-based open source image library software. Piwigo version 2.10.1 has a cross-site scripting vulnerability that allows attackers to execute arbitrary Web scripts or HTML...

Piwigo 跨站脚本漏洞

Piwigo is a set of Web-based open source photo gallery software. Piwigo version 2.10.1 has a cross-site scripting vulnerability that allows attackers to execute arbitrary Web scripts or HTML...

Arbitrary File Read Vulnerability in Piwigo

Piwigo is an open source photo album program for the web. Piwigo suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Piwigo < 11.4.0 SQL Injection Vulnerability

Piwigo is prone to an SQL injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...