CVE-2023-27233: SQL Injection
Published May 17, 2023
·Updated
Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at userlistbackend.php.
Affected Software
1 affected component
Piwigo piwigo<13.6.0
Event History
May 17, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID for this Piwigo vulnerability?
The vulnerability ID for this Piwigo vulnerability is CVE-2023-27233.
2
What is the severity of CVE-2023-27233?
The severity of CVE-2023-27233 is high with a severity score of 8.8.
3
How does the SQL injection vulnerability occur in Piwigo?
The SQL injection vulnerability occurs in Piwigo through the order[0][dir] parameter in the user_list_backend.php file.
4
What version of Piwigo is affected by CVE-2023-27233?
Versions of Piwigo up to and excluding 13.6.0 are affected by CVE-2023-27233.
5
Are there any available fixes for CVE-2023-27233?
Yes, the fix for CVE-2023-27233 is to upgrade Piwigo to version 13.6.0 or above.