VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402.263 vulnerabilities · 1.766 actively exploited (CISA KEV)

piwigo ✕Clear filters

114 results

ID	Severity	Summary	Published
CVE-2023-33361	KRITISCH9.8	Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.	23/05/2023
CVE-2023-33359	MITTEL4.3	Piwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function.	23/05/2023
CVE-2023-27233	HOCH8.8	Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.	17/05/2023
CVE-2023-26876	HOCH8.8	SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.