auxiliary/gather/piwigo_cve_2023_26876

functional

Piwigo CVE-2023-26876 Gather Credentials via SQL Injection

view exploit source metasploittype auxiliarypublished 2023-04-21catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2023-26876US	high8.8	9.72% (95th)	Exploit	2023-04-21
SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&fi…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.