23 matches found
PT-2023-24310 · Piwigo · Piwigo
Name of the Vulnerable Software and Affected Versions: Piwigo version 13.6.0 Description: The issue is related to SQL Injection via the profile function. Recommendations: For Piwigo version 13.6.0, at the moment, there is no information about a newer version that contains a fix for this...
9.8CVSS8.1AI score0.09058EPSS
SaveExploits3References7
CVE-2023-33362
Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function...
10AI score0.09058EPSS
SaveExploits3References2
Sql injection
A vulnerability was found in barronwaffles dwcnetworkserveremulator. It has been declared as critical. This vulnerability affects the function updateprofile of the file gamespy/gsdatabase.py. The manipulation of the argument firstname/lastname leads to sql injection. The attack can be initiated...
7.5CVSS9.8AI score0.00679EPSS
SaveExploits0References4Affected Software1
20