Show filters
5 Total Results
Displaying 1-5 of 5
Sort by:
Attacker Value
Unknown
CVE-2021-40553
Disclosure Date: June 28, 2022 (last updated February 24, 2025)
piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.
0
Attacker Value
Unknown
CVE-2021-40678
Disclosure Date: June 14, 2022 (last updated February 23, 2025)
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.
0
Attacker Value
Unknown
CVE-2021-40317
Disclosure Date: May 26, 2022 (last updated February 23, 2025)
Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.
0
Attacker Value
Unknown
CVE-2021-40882
Disclosure Date: December 14, 2021 (last updated February 23, 2025)
A Cross Site Scripting (XSS) vulnerability exists in Piwigo 11.5.0 via the system album name and description of the location.
0
Attacker Value
Unknown
CVE-2021-40313
Disclosure Date: December 06, 2021 (last updated February 23, 2025)
Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager_global.php.
0
