CVE-2023-33362 - Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function

CRITICAL

Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function

Published May 23, 2023

9.8

CRITICAL

CVSS 3.1

EPSS 9.06%

Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37525		Advisory
https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-33362.md
https://github.com/Piwigo/Piwigo/issues/1911		ExploitIssue TrackingPatch

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 23, 2023

Updated Apr 16, 2025

Reserved May 22, 2023

Updated Jan 16, 2025

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner mitre

Published May 23, 2023

Updated Apr 16, 2025

Exploited since n/a