CVE-2023-26876

4 known exploits for CVE-2023-26876

SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.

Affected products: Piwigo
Piwigo: ≤ 13.5.0

Fix: Available
CVSS 3.1: 8.8 HIGH
EPSS: 9.7% (95th percentile)
Weakness: CWE-89
NVD status: Modified
Published: 2023-04-21

CVE-2023-26876 at NVD

Authoritative description, scoring and affected products

Piwigo CVE-2023-26876 Gather Credentials via SQL Injection

2024-08-31 Rodolfo Tavares, rodnt, Tempest Security, metasploit.comPACKETSTORMRuby

Piwigo 13.5.0 SQL Injection Vulnerability

2023-04-28 Rodolfo TavaresZDT

Piwigo 13.5.0 SQL Injection

2023-04-28 Rodolfo Tavares, tempest.com.brPACKETSTORM

Piwigo CVE-2023-26876 Gather Credentials via SQL Injection

2023-04-21 rodnt, Rodolfo Tavares, Tempest Security, Henrique ArcoverdeMETASPLOITRuby