← Back to browse
·
API
CVE-2023-33362
Severity
CRITICAL
CVSS
9.8
EPSS
0.09058
Risk score
42.37
CISA KEV
No
PoC
No
Published
2023-05-23
Modified
2025-04-16
First seen
2026-08-07
Aliases
EUVD-2023-37525, GHSA-GGJX-VPR3-6VWG
Products
n/a:n/a n/a
Sources
euvd
EUVD-2023-37525
Description
Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function.
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-37525
https://github.com/Piwigo/Piwigo/issues/1911
https://github.com/MarkLee131/awesome-web-pocs/blob/main/CVE-2023-33362.md