CVE-2023-33361: SQL Injection
First published: Tue May 23 2023(Updated: )
Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Piwigo Piwigo | =13.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2023-33361?
CVE-2023-33361 is a vulnerability in Piwigo 13.6.0 that allows SQL Injection via the /admin/permalinks.php page.
How severe is CVE-2023-33361?
CVE-2023-33361 has a severity rating of 9.8 (critical).
How does CVE-2023-33361 affect Piwigo?
CVE-2023-33361 affects Piwigo version 13.6.0.
How can CVE-2023-33361 be exploited?
CVE-2023-33361 can be exploited by sending malicious SQL queries through the /admin/permalinks.php page.
Is there a fix for CVE-2023-33361?
Currently, there is no known fix for CVE-2023-33361. It is recommended to update to a later version when available.
- collector/nvd-index
- vendor/piwigo
- canonical/piwigo piwigo
- version/piwigo piwigo/13.6.0