EUVD-2022-30827

Malicious code in bioql PyPI...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

Sql injection

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function...

CVE-2022-32297

CVE-2022-32297 affects Piwigo v12.2.0 and earlier, where the SQL injection vulnerability is triggered via the Search function. The OpenVAS/Red Hat/CVE entries corroborate a web-facing SQLi issue in Piwigo’s search path, with the root cause described as injectable payloads impacting the database. ...

CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

CVE-2022-26266

Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php...

CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

CVE-2022-26266

Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php...

Design/Logic Flaw

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

CVE-2022-26267

CVE-2022-26267 affects Piwigo v12.2.0, with an information leak via the action parameter in /admin/maintenance_actions.php. The available connected records consistently describe Piwigo 12.2.0 as vulnerable to information disclosure through this endpoint; no exploit details or affected versions be...

CVE-2022-26267

Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenanceactions.php...

CVE-2022-26266

Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php...

CVE-2022-26266

CVE-2022-26266 affects Piwigo v12.2.0 with a SQL injection vulnerability via pwg.users.php. The issue is confirmed across multiple sources (NVD, Red Hat, OSV, CVE lists) and is attributed a CVSSv3.1 base score of 8.8 (Network, Low attack complexity, Privileges Required: Low, No user interaction; ...