Show filters
88 Total Results
Displaying 11-20 of 88
Sort by:
Attacker Value
Unknown
CVE-2022-37183
Disclosure Date: August 31, 2022 (last updated October 08, 2023)
Piwigo 12.3.0 is vulnerable to Cross Site Scripting (XSS) via /search/1940/created-monthly-list.
0
Attacker Value
Unknown
CVE-2022-32297
Disclosure Date: July 14, 2022 (last updated October 07, 2023)
Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.
0
Attacker Value
Unknown
CVE-2021-40553
Disclosure Date: June 28, 2022 (last updated October 07, 2023)
piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.
0
Attacker Value
Unknown
CVE-2021-40678
Disclosure Date: June 14, 2022 (last updated October 07, 2023)
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.
0
Attacker Value
Unknown
CVE-2021-40317
Disclosure Date: May 26, 2022 (last updated February 23, 2025)
Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.
0
Attacker Value
Unknown
CVE-2020-19217
Disclosure Date: May 06, 2022 (last updated February 23, 2025)
SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager.
0
Attacker Value
Unknown
CVE-2020-19216
Disclosure Date: May 06, 2022 (last updated February 23, 2025)
SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm.
0
Attacker Value
Unknown
CVE-2020-19215
Disclosure Date: May 06, 2022 (last updated February 23, 2025)
SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm.
0
Attacker Value
Unknown
CVE-2020-19213
Disclosure Date: May 06, 2022 (last updated February 23, 2025)
SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.
0
Attacker Value
Unknown
CVE-2020-19212
Disclosure Date: May 06, 2022 (last updated February 23, 2025)
SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete.
0
