SQL Injection

Every one of the 16 is a mark on the map. Named now: 1 to 16, most at risk first.

1. Piwigo 13.7.0 - SQL InjectionCVE-2023-37270Piwigo · CVSS 7.6 · 4.5% likely

   CWE-89

2. SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&f…CVE-2023-26876Piwigo · CVSS 8.8 · 9.7% likely

   CWE-89

3. Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.CVE-2023-33362Piwigo · CVSS 9.8 · 9.1% likely

   CWE-89

4. Piwigo v12.2.0 was discovered to contain a SQL injection vulnerability via pwg.users.php.CVE-2022-26266Piwigo · 1.3% likely

   CWE-89

5. Piwigo: SQL injection in upgrade authentication allows unauthenticated upgrade authorization bypass (PHP 8+)CVE-2026-44642Piwigo · CVSS 8.1 · 1.3% likely

   CWE-89

6. Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.CVE-2022-32297Piwigo · 1.2% likely

   CWE-89

7. Piwigo: Second-Order SQL InjectionCVE-2026-42324Piwigo · CVSS 7.2 · 0.9% likely

   CWE-89

8. Piwigo: SQL Injection in Batch ManagerCVE-2026-42323Piwigo · CVSS 7.2 · 0.9% likely

   CWE-89

9. Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php.CVE-2023-33361Piwigo · CVSS 9.8 · 0.9% likely

   CWE-89

10. Piwigo before 13.6.0 was discovered to contain a SQL injection vulnerability via the order[0][dir] parameter at user_list_backend.php.CVE-2023-27233Piwigo · CVSS 8.8 · 0.9% likely

    CWE-89

11. Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`CVE-2026-62262Piwigo · CVSS 9.1 · 0.7% likely

    CWE-89

12. Piwigo: Pre-auth SQL injection via date filter parameters in ws_std_image_sql_filterCVE-2026-27634Piwigo · CVSS 8.7 · 0.7% likely

    CWE-89

13. Piwigo 13.7.0 is vulnerable to SQL Injection via the "Users" function.CVE-2023-34626Piwigo · 0.5% likely

    CWE-89

14. Piwigo: SQL Injection in Activity.getListCVE-2026-27885Piwigo · CVSS 7.2 · 0.4% likely

    CWE-89

15. Piwigo: SQL Injection in pwg.users.getList API Method via filter ParameterCVE-2026-27834Piwigo · CVSS 7.2 · 0.4% likely

    CWE-89

16. Piwigo 13.8.0 and below is vulnerable to SQL Injection in the parameters max_level and min_register. These parameters are used in ws_user_gerList function from file include\ws_fun…CVE-2024-43018Piwigo · CVSS 6.4 · 0.3% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.