CVE-2023-33362: SQL Injection
First published: Tue May 23 2023(Updated: )
Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Piwigo Piwigo | =13.6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Piwigo issue?
The vulnerability ID for this Piwigo issue is CVE-2023-33362.
What is the severity level of CVE-2023-33362?
The severity level of CVE-2023-33362 is critical with a score of 9.8.
How does Piwigo 13.6.0 get affected by this vulnerability?
Piwigo 13.6.0 is vulnerable to SQL Injection via the "profile" function.
What is the affected software version?
The affected software version is Piwigo 13.6.0.
Is there a fix available for this vulnerability?
Yes, a fix for this vulnerability is available. It is recommended to upgrade to the latest version of Piwigo.
- collector/nvd-index
- agent/references
- agent/severity
- agent/weakness
- agent/author
- agent/type
- agent/description
- agent/event
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/piwigo
- canonical/piwigo piwigo
- version/piwigo piwigo/13.6.0