CVE-2022-32297

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2022-32297

Import Source

https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-32297.json

JSON Data

https://api.test.osv.dev/v1/vulns/CVE-2022-32297

Published

2022-07-14T20:15:08.620Z

Modified

2025-11-14T13:22:20.107783Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H CVSS Calculator

Summary

[none]

Details

Piwigo v12.2.0 was discovered to contain SQL injection vulnerability via the Search function.

References

https://github.com/sth276/research/blob/main/piwigo_vul/Second-Order%20SQL%20Injection%20Vulnerabilities%20in%20Piwigo.md

Affected packages

Git / github.com/piwigo/piwigo

Affected ranges

Type: GIT
Repo: https://github.com/piwigo/piwigo
Events: Introduced

0 Unknown introduced commit / All previous commits are affected

Last affected

7c27f9624aa41385cbf5422d4b299afb33d1d643

Affected versions

12.*

12.0.0

12.0.0RC1

12.0.0RC2

12.0.0beta1

12.0.0beta2

12.1.0

12.2.0

2.*

2.10.0RC1

2.10.0beta1

2.10.0beta2

2.11.0beta1

2.11.0beta2

2.11.0beta3

2.11.0beta4

2.8.0

2.8.0RC1

2.8.0RC2

2.8.1

2.8.2

2.9.0RC1

2.9.0RC2

2.9.0beta1

2.9.0beta2

Database specific

source

"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2022-32297.json"