Page 2 of 7 results (0.003 seconds)

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1

CVE-2022-32297

https://notcve.org/view.php?id=CVE-2022-32297

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function. Se ha detectado que Piwigo versión v12.2.0, contiene una vulnerabilidad de inyección SQL por medio de la función Search • https://github.com/sth276/research/blob/main/piwigo_vul/Second-Order%20SQL%20Injection%20Vulnerabilities%20in%20Piwigo.md • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-45357

https://notcve.org/view.php?id=CVE-2021-45357

Cross Site Scripting (XSS) vulnerability exists in Piwigo 12.x via the pwg_activity function in include/functions.inc.php. Se presenta una vulnerabilidad de tipo Cross Site Scripting (XSS) en Piwigo versión 12.x, por medio de la función pwg_activity en el archivo include/functions.inc.php • https://github.com/Piwigo/Piwigo/issues/1582 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •