VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

402,603 vulnerabilities · 1,766 actively exploited (CISA KEV)

piwigo ✕Clear filters

103 results

ID	Severity	Summary	Published
CVE-2023-33361	심각9.8	Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.	23/05/2023
CVE-2023-33359	보통4.3	Piwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function.	23/05/2023
CVE-2023-27233	높음8.8	Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.	17/05/2023
CVE-2023-26876	높음8.8	SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.