Vulnerabilities > Piwigo > Piwigo > 12.2.0

DATE CVE VULNERABILITY TITLE RISK
2023-10-09 CVE-2023-44393 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Piwigo
Piwigo is an open source photo gallery application.
network
low complexity
piwigo CWE-80
6.1
2023-07-07 CVE-2023-37270 SQL Injection vulnerability in Piwigo
Piwigo is open source photo gallery software.
network
low complexity
piwigo CWE-89
8.8
2023-06-15 CVE-2023-34626 SQL Injection vulnerability in Piwigo
Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function.
network
low complexity
piwigo CWE-89
4.3
2023-05-17 CVE-2023-27233 SQL Injection vulnerability in Piwigo
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.
network
low complexity
piwigo CWE-89
8.8
2023-04-21 CVE-2023-26876 SQL Injection vulnerability in Piwigo
SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.
network
low complexity
piwigo CWE-89
8.8
2022-07-14 CVE-2022-32297 SQL Injection vulnerability in Piwigo
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.
network
high complexity
piwigo CWE-89
5.1
2022-03-18 CVE-2022-26266 SQL Injection vulnerability in Piwigo 12.2.0
Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php.
network
low complexity
piwigo CWE-89
6.5
2022-03-18 CVE-2022-26267 Missing Authentication for Critical Function vulnerability in Piwigo 12.2.0
Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenance_actions.php.
network
low complexity
piwigo CWE-306
7.5
2022-02-24 CVE-2022-24620 Cross-site Scripting vulnerability in Piwigo 12.2.0
Piwigo version 12.2.0 is vulnerable to stored cross-site scripting (XSS), which can lead to privilege escalation.
network
piwigo CWE-79
3.5