Vulnerabilities > Piwigo > Piwigo > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2023-07-07 | CVE-2023-37270 | Unspecified vulnerability in Piwigo Piwigo is open source photo gallery software. | 8.8 |
| 2023-05-17 | CVE-2023-27233 | SQL Injection vulnerability in Piwigo Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php. | 8.8 |
| 2023-04-21 | CVE-2023-26876 | SQL Injection vulnerability in Piwigo SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint. | 8.8 |
| 2022-07-14 | CVE-2022-32297 | SQL Injection vulnerability in Piwigo Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function. | 7.5 |
| 2022-06-28 | CVE-2021-40553 | Code Injection vulnerability in Piwigo 11.5.0 piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor. | 8.8 |
| 2022-05-26 | CVE-2021-40317 | SQL Injection vulnerability in Piwigo 11.5.0 Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter. | 8.8 |
| 2022-05-06 | CVE-2020-19215 | SQL Injection vulnerability in Piwigo 2.9.5 SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. | 8.8 |
| 2022-05-06 | CVE-2020-19216 | SQL Injection vulnerability in Piwigo 2.9.5 SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. | 8.8 |
| 2022-05-06 | CVE-2020-19217 | SQL Injection vulnerability in Piwigo 2.9.5 SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. | 8.8 |
| 2022-03-18 | CVE-2022-26266 | SQL Injection vulnerability in Piwigo 12.2.0 Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php. | 8.8 |