1062 matches found
Piwigo < 11.5.0 SQL Injection Vulnerability
Piwigo is prone to an SQL injection vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Piwigo SQL Injection Vulnerability
Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in the order0dir parameter in admin/userlistbackend.php in Piwigo version 11.4.0. An attacker can exploit this vulnerability to obtain sensitive database information...
CVE-2021-32615
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
CVE-2021-32615
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
CVE-2021-32615
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
Sql injection
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
CVE-2021-32615
Piwigo 11.4.0 allows admin/userlistbackend.php order0dir SQL Injection...
CVE-2021-32615
CVE-2021-32615 affects Piwigo 11.4.0 and is caused by an SQL injection in the admin/user_list_backend.php endpoint via the order[0][dir] parameter, potentially exposing sensitive database information. The core details come from multiple sources (NVD, CNVD/CNNVD, Red Hat, OSV, OpenVAS) confirming ...
Piwigo SQL注入漏洞
Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in the order0dir parameter in admin/userlistbackend.php in Piwigo version 11.4.0. An attacker can exploit this vulnerability to obtain sensitive database information...
Piwigo 11.3.0 - 'language' SQL
Exploit Title: Piwigo 11.3.0 - 'language' SQL Author: @nu11secur1ty Testing and Debugging: nu11secur1ty Date: 04.30.2021 Vendor: https://piwigo.org/ Link: https://github.com/Piwigo/Piwigo/releases/tag/11.3.0 CVE: CVE-2021-27973 + Exploit Source: !/usr/bin/python3 Author: @nu11secur1ty Debug:...
Piwigo 11.3.0 SQL Injection Exploit
Exploit Title: SQL injection in language parameter to admin.php?page=languages.on Piwigo 11.3.0 Testing and Debugging: nu11secur1ty Vendor: https://piwigo.org/ Link: https://github.com/Piwigo/Piwigo/releases/tag/11.3.0 CVE: CVE-2021-27973 + Exploit Source: !/usr/bin/python3 Author: @nu11secur1ty...
Piwigo 11.3.0 SQL Injection
Exploit Title: SQL injection in language parameter to admin.php?page=languages.on Piwigo 11.3.0 Author: @nu11secur1ty Testing and Debugging: nu11secur1ty Date: 04.30.2021 Vendor: https://piwigo.org/ Link: https://github.com/Piwigo/Piwigo/releases/tag/11.3.0 CVE: CVE-2021-27973 + Exploit Source:...
Code Execution Vulnerability in Piwigo
Piwigo is a web-based photo album software from the Piwigo team. A code execution vulnerability exists in Piwigo. A remote attacker can exploit this vulnerability to write arbitrary code and gain server privileges...
Piwigo suffers from a SQL injection vulnerability
Piwigo is a web-based photo album software from the Piwigo team. Piwigo suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive database information...
CVE-2021-31783
showdefault.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check...
CVE-2021-31783
showdefault.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check...
CVE-2021-31783
showdefault.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check...
Design/Logic Flaw
showdefault.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check...
CVE-2021-31783
showdefault.php in the LocalFilesEditor extension before 11.4.0.1 for Piwigo allows Local File Inclusion because the file parameter is not validated with a proper regular-expression check...
CVE-2021-31783
The CVE-2021-31783 issue affects the LocalFilesEditor extension for Piwigo, specifically the show_default.php component. The vulnerability arises from an insufficient validation of the file parameter using a regular expression, enabling Local File Inclusion (LFI) in versions before 11.4.0.1. Mult...