CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

NVD•added 2021/12/06 9:15 p.m.•33 views

CVE-2021-40313

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwgtoken in /admin/batchmanagerglobal.php...

8.8CVSS0.01149EPSS

SaveExploits1References1

osv_cve•added 2021/12/06 9:15 p.m.•23 views

CVE-2021-40313

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwgtoken in /admin/batchmanagerglobal.php...

8.8CVSS8.2AI score

SaveExploits0References1

Prion•added 2021/12/06 9:15 p.m.•26 views

Sql injection

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwgtoken in /admin/batchmanagerglobal.php...

6.5CVSS8.9AI score0.01149EPSS

SaveExploits1References1Affected Software1

CVE•added 2021/12/06 8:22 p.m.•69 views

CVE-2021-40313

CVE-2021-40313 affects Piwigo v11.5, with a SQL injection vulnerability in the pwg_token parameter of /admin/batch_manager_global.php. The issue is caused by insufficient escaping/ filtering, as reported across sources (NVD entry and Red Hat/CVE references). Impact is described as SQL injection w...

8.8CVSS8.9AI score0.01149EPSS

SaveExploits1References1Affected Software1

Mend•added 2021/12/06 8:22 p.m.•6 views

CVE-2021-40313

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwgtoken in /admin/batchmanagerglobal.php...

8.8CVSS0.01149EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2021/12/06 12:00 a.m.•9 views

CVE-2021-40313: Improper Neutralization of Special Elements used in an SQL Command

Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwgtoken in /admin/batchmanagerglobal.php...

8.8CVSS5.8AI score0.01149EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by