Vulnerabilities > Piwigo > Piwigo > 2.10.1
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-10-09 | CVE-2023-44393 | Unspecified vulnerability in Piwigo Piwigo is an open source photo gallery application. | 6.1 |
2023-07-07 | CVE-2023-37270 | Unspecified vulnerability in Piwigo Piwigo is open source photo gallery software. | 8.8 |
2023-06-15 | CVE-2023-34626 | SQL Injection vulnerability in Piwigo Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. | 4.3 |
2023-05-17 | CVE-2023-27233 | SQL Injection vulnerability in Piwigo Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php. | 8.8 |
2023-04-21 | CVE-2023-26876 | SQL Injection vulnerability in Piwigo SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint. | 8.8 |
2022-07-14 | CVE-2022-32297 | SQL Injection vulnerability in Piwigo Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function. | 7.5 |
2021-07-21 | CVE-2020-22148 | Cross-site Scripting vulnerability in Piwigo 2.10.1 A stored cross site scripting (XSS) vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML. | 6.1 |
2021-07-21 | CVE-2020-22150 | Cross-site Scripting vulnerability in Piwigo 2.10.1 A cross site scripting (XSS) vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML. | 6.1 |
2021-04-02 | CVE-2021-27973 | SQL Injection vulnerability in Piwigo SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages. | 7.2 |
2020-03-26 | CVE-2020-9467 | Cross-site Scripting vulnerability in Piwigo 2.10.1 Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function. | 5.4 |