İçeriğe atla
Noroxi

Piwigo kayıtları

piwigo üreticisine ait 114 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
1 · %0,9
Pre-auth RCE
9
Düzeltme kaydı olan
%5,3
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 16
  2. 17
  3. 18
  4. 19
  5. 20
  6. 21
  7. 22
  8. 23
  9. 24
  10. 25
  11. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

114 kayıt
  • CVE-2020-19213
    44Planlayın

    SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories.

    KritikCVSS 9,8İstismar yokEPSS %16

    piwigo · piwigo6 May 2022

  • CVE-2023-33362
    42Planlayın

    Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.

    KritikCVSS 9,8Kavram kanıtıEPSS %9

    piwigo · piwigo23 May 2023

  • CVE-2017-10682
    41Planlayın

    SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via

    KritikCVSS 9,8Kavram kanıtıEPSS %8

    piwigo · piwigo29 Haz 2017

  • CVE-2014-8945
    40Planlayın

    admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields.

    KritikCVSS 9,8İstismar yokEPSS %2

    piwigo · lexiglot1 Haz 2020

  • CVE-2016-10105
    40Planlayın

    admin/plugin.php in Piwigo through 2.8.3 doesn't validate the sections variable while using it to include files.

    KritikCVSS 9,8İstismar yokEPSS %2

    piwigo · piwigo3 Oca 2017

  • CVE-2021-32615
    40Planlayın

    Piwigo 11.4.0 allows admin/user_list_backend.php order[0][dir] SQL Injection.

    KritikCVSS 9,8İstismar yokEPSS %2

    piwigo · piwigo13 May 2021

  • CVE-2014-4648
    40Planlayın

    Unspecified vulnerability in Piwigo before 2.6.3 has unknown impact and attack vectors, related to a "security failure."

    KritikCVSS 10,0İstismar yokEPSS %1

    piwigo · piwigo28 Haz 2014

  • CVE-2014-8941
    39İzleyin

    Lexiglot through 2014-11-20 allows SQL injection via an admin.php?page=users&from_id= or admin.php?page=history&limit= URI.

    KritikCVSS 9,8İstismar yokEPSS %1

    piwigo · lexiglot1 Haz 2020

  • CVE-2023-33361
    39İzleyin

    Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.

    KritikCVSS 9,8İstismar yokEPSS %1

    piwigo · piwigo23 May 2023

  • CVE-2014-125053
    39İzleyin

    Piwigo-Guest-Book Navigation Bar guestbook.inc.php sql injection

    KritikCVSS 9,8İstismar yokEPSS %1

    piwigo · guestbook6 Oca 2023

  • CVE-2023-26876
    38İzleyin

    SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id pa

    YüksekCVSS 8,8SilahlaştırılmışEPSS %10

    piwigo · piwigo21 Nis 2023

  • CVE-2019-13363
    38İzleyin

    admin.php?page=notification_by_mail in Piwigo 2.9.5 has XSS via the nbm_send_html_mail, nbm_send_mail_as, nbm_se

    KritikCVSS 9,6İstismar yokEPSS %1

    piwigo · piwigo13 Eyl 2019

  • CVE-2019-13364
    38İzleyin

    admin.php?page=account_billing in Piwigo 2.9.5 has XSS via the vat_number, billing_name, company, or billing_address parameter.

    KritikCVSS 9,6İstismar yokEPSS %1

    piwigo · piwigo13 Eyl 2019

  • CVE-2023-37270
    36İzleyin

    Piwigo SQL Injection vulnerability in "User-Agent"

    YüksekCVSS 8,8Kavram kanıtıEPSS %5

    piwigo · piwigo7 Tem 2023

  • CVE-2021-40553
    36İzleyin

    piwigo 11.5.0 is affected by a remote code execution (RCE) vulnerability in the LocalFiles Editor.

    YüksekCVSS 8,8İstismar yokEPSS %2

    piwigo · piwigo28 Haz 2022

  • CVE-2022-26266
    35İzleyin

    Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php.

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo18 Mar 2022

  • CVE-2017-10678
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for re

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo29 Haz 2017

  • CVE-2017-10680
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for re

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo29 Haz 2017

  • CVE-2017-10681
    35İzleyin

    Cross-site request forgery (CSRF) vulnerability in Piwigo through 2.9.1 allows remote attackers to hijack the authentication of users for re

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo29 Haz 2017

  • CVE-2021-40313
    35İzleyin

    Piwigo v11.5 was discovered to contain a SQL injection vulnerability via the parameter pwg_token in /admin/batch_manager_global.php.

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo6 Ara 2021

  • CVE-2020-19215
    35İzleyin

    SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm.

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo6 May 2022

  • CVE-2020-19216
    35İzleyin

    SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm.

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo6 May 2022

  • CVE-2020-19217
    35İzleyin

    SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager.

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo6 May 2022

  • CVE-2014-8943
    35İzleyin

    Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svn_url parameter.

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · lexiglot1 Haz 2020

  • CVE-2021-40317
    35İzleyin

    Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter.

    YüksekCVSS 8,8İstismar yokEPSS %1

    piwigo · piwigo26 May 2022