Vulnerabilities
Vulnerable Software
Piwigo:  >> Piwigo  Security Vulnerabilities
piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.
CVSS Score
8.8
EPSS Score
0.028
Published
2022-06-28
In Piwigo 11.5.0, there exists a persistent cross-site scripting in the single mode function through /admin.php?page=batch_manager&mode=unit.
CVSS Score
5.4
EPSS Score
0.002
Published
2022-06-14
Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-05-26
SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete.
CVSS Score
4.9
EPSS Score
0.002
Published
2022-05-06
SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.
CVSS Score
9.8
EPSS Score
0.013
Published
2022-05-06
SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-05-06
SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-05-06
SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-05-06
Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php.
CVSS Score
8.8
EPSS Score
0.005
Published
2022-03-18
Piwigo v12.2.0 was discovered to contain an information leak via the action parameter in /admin/maintenance_actions.php.
CVSS Score
7.5
EPSS Score
0.009
Published
2022-03-18


Contact Us

Shodan ® - All rights reserved