GCVE - cpe:2.3:a:piwigo:lexiglot:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:piwigo:lexiglot:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Piwigo (`435f9601-9f57-5ff8-bd2f-46b9e78f04e6`)
Product	Lexiglot (`06ab6479-a02a-5ddf-9b25-58df7b22ec84`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/mistic100/lexiglot`	purl2cpe	2026-06-01 10:16:53.581000

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2014-8945`	vulnerable	2026-06-08 05:06:10.485144	Details available admin.php?page=projects in Lexiglot through 2014-11-20 allows command injection via username and password fields. Published: 2020-06-01T16:11:57.000Z Updated: 2024-08-06T13:33:12.527Z Open on db.gcve.eu Reference links https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8944`	vulnerable	2026-06-08 05:06:10.484877	Details available Lexiglot through 2014-11-20 allows XSS (Reflected) via the username, or XSS (Stored) via the admin.php?page=config install_name, intro_message, or new_file_content parameter. Published: 2020-06-01T16:27:42.000Z Updated: 2024-08-06T13:33:12.588Z Open on db.gcve.eu Reference links https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8943`	vulnerable	2026-06-08 05:06:10.484607	Details available Lexiglot through 2014-11-20 allows SSRF via the admin.php?page=projects svn_url parameter. Published: 2020-06-01T16:28:39.000Z Updated: 2024-08-06T13:33:12.673Z Open on db.gcve.eu Reference links https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8942`	vulnerable	2026-06-08 05:06:10.484340	Details available Lexiglot through 2014-11-20 allows CSRF. Published: 2020-06-01T16:29:39.000Z Updated: 2024-08-06T13:33:12.785Z Open on db.gcve.eu Reference links https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8941`	vulnerable	2026-06-08 05:06:10.484068	Details available Lexiglot through 2014-11-20 allows SQL injection via an admin.php?page=users&from_id= or admin.php?page=history&limit= URI. Published: 2020-06-01T16:30:35.000Z Updated: 2024-08-06T13:33:12.662Z Open on db.gcve.eu Reference links https://www.justanotherhacker.com/2018/05/jahx181_-_piwigo_lexiglot_multiple_vulnerabilities.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8940`	vulnerable	2026-06-08 05:06:10.483784	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8939`	vulnerable	2026-06-08 05:06:10.483493	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8938`	vulnerable	2026-06-08 05:06:10.483190	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2014-8937`	vulnerable	2026-06-08 05:06:10.482785	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.