Vulnerabilities > Piwigo > Piwigo > 2.10.1

DATE CVE VULNERABILITY TITLE RISK
2023-10-09 CVE-2023-44393 Unspecified vulnerability in Piwigo
Piwigo is an open source photo gallery application.
network
low complexity
piwigo
6.1
2023-07-07 CVE-2023-37270 Unspecified vulnerability in Piwigo
Piwigo is open source photo gallery software.
network
low complexity
piwigo
8.8
2023-06-15 CVE-2023-34626 SQL Injection vulnerability in Piwigo
Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function.
network
low complexity
piwigo CWE-89
4.3
2023-05-17 CVE-2023-27233 SQL Injection vulnerability in Piwigo
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.
network
low complexity
piwigo CWE-89
8.8
2023-04-21 CVE-2023-26876 SQL Injection vulnerability in Piwigo
SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.
network
low complexity
piwigo CWE-89
8.8
2022-07-14 CVE-2022-32297 SQL Injection vulnerability in Piwigo
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.
network
high complexity
piwigo CWE-89
7.5
2021-07-21 CVE-2020-22148 Cross-site Scripting vulnerability in Piwigo 2.10.1
A stored cross site scripting (XSS) vulnerability in /admin.php?page=tags of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.
network
low complexity
piwigo CWE-79
6.1
2021-07-21 CVE-2020-22150 Cross-site Scripting vulnerability in Piwigo 2.10.1
A cross site scripting (XSS) vulnerability in /admin.php?page=permalinks of Piwigo 2.10.1 allows attackers to execute arbitrary web scripts or HTML.
network
low complexity
piwigo CWE-79
6.1
2021-04-02 CVE-2021-27973 SQL Injection vulnerability in Piwigo
SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.
network
low complexity
piwigo CWE-89
7.2
2020-03-26 CVE-2020-9467 Cross-site Scripting vulnerability in Piwigo 2.10.1
Piwigo 2.10.1 has stored XSS via the file parameter in a /ws.php request because of the pwg.images.setInfo function.
network
low complexity
piwigo CWE-79
5.4