CVE-2023-27233: SQL Injection
First published: Wed May 17 2023(Updated: )
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Piwigo Piwigo | <13.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Piwigo vulnerability?
The vulnerability ID for this Piwigo vulnerability is CVE-2023-27233.
What is the severity of CVE-2023-27233?
The severity of CVE-2023-27233 is high with a severity score of 8.8.
How does the SQL injection vulnerability occur in Piwigo?
The SQL injection vulnerability occurs in Piwigo through the order[0][dir] parameter in the user_list_backend.php file.
What version of Piwigo is affected by CVE-2023-27233?
Versions of Piwigo up to and excluding 13.6.0 are affected by CVE-2023-27233.
Are there any available fixes for CVE-2023-27233?
Yes, the fix for CVE-2023-27233 is to upgrade Piwigo to version 13.6.0 or above.
- collector/nvd-index
- vendor/piwigo
- canonical/piwigo piwigo