Vulnerabilities > Piwigo > Piwigo > 2.1.5
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-09 | CVE-2023-44393 | Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Piwigo Piwigo is an open source photo gallery application. | 6.1 |
| 2023-07-07 | CVE-2023-37270 | SQL Injection vulnerability in Piwigo Piwigo is open source photo gallery software. | 8.8 |
| 2023-06-15 | CVE-2023-34626 | SQL Injection vulnerability in Piwigo Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. | 4.3 |
| 2023-05-17 | CVE-2023-27233 | SQL Injection vulnerability in Piwigo Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php. | 8.8 |
| 2023-04-21 | CVE-2023-26876 | SQL Injection vulnerability in Piwigo SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint. | 8.8 |
| 2022-07-14 | CVE-2022-32297 | SQL Injection vulnerability in Piwigo Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function. | 5.1 |
| 2022-01-28 | CVE-2016-3735 | Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Piwigo Piwigo is image gallery software written in PHP. | 8.1 |
| 2021-04-02 | CVE-2021-27973 | SQL Injection vulnerability in Piwigo SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages. | 6.5 |
| 2018-02-24 | CVE-2018-6883 | SQL Injection vulnerability in Piwigo Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. | 4.0 |
| 2017-12-01 | CVE-2017-16893 | SQL Injection vulnerability in Piwigo The application Piwigo is affected by an SQL injection vulnerability in version 2.9.2 and possibly prior. | 4.0 |