Vulnerabilities > Piwigo > Piwigo > 2.4.1
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-10-09 | CVE-2023-44393 | Unspecified vulnerability in Piwigo Piwigo is an open source photo gallery application. | 6.1 |
| 2023-07-07 | CVE-2023-37270 | Unspecified vulnerability in Piwigo Piwigo is open source photo gallery software. | 8.8 |
| 2023-06-15 | CVE-2023-34626 | SQL Injection vulnerability in Piwigo Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function. | 4.3 |
| 2023-05-17 | CVE-2023-27233 | SQL Injection vulnerability in Piwigo Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php. | 8.8 |
| 2023-04-21 | CVE-2023-26876 | SQL Injection vulnerability in Piwigo SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint. | 8.8 |
| 2022-07-14 | CVE-2022-32297 | SQL Injection vulnerability in Piwigo Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function. | 7.5 |
| 2022-01-28 | CVE-2016-3735 | Incorrect Usage of Seeds in Pseudo-Random Number Generator (PRNG) vulnerability in Piwigo Piwigo is image gallery software written in PHP. | 8.1 |
| 2021-04-02 | CVE-2021-27973 | SQL Injection vulnerability in Piwigo SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages. | 7.2 |
| 2019-12-02 | CVE-2012-4526 | Cross-site Scripting vulnerability in Piwigo piwigo has XSS in password.php (incomplete fix for CVE-2012-4525) | 6.1 |
| 2019-12-02 | CVE-2012-4525 | Cross-site Scripting vulnerability in Piwigo piwigo has XSS in password.php | 6.1 |