GCVE - cpe:2.3:a:piwigo:piwigo:2.9.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:piwigo:piwigo:2.9.5:*:*:*:*:*:*:*

part: a version: 2.9.5 update: *

Vendor	Piwigo (`435f9601-9f57-5ff8-bd2f-46b9e78f04e6`)
Product	Piwigo (`d2517e6f-173e-5046-84cf-86cc698c9439`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/piwigo/piwigo`	purl2cpe	2026-06-01 10:16:53.515400
`pkg:pypi/piwigo`	purl2cpe	2026-06-01 10:16:53.515401

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-19217`	vulnerable	2026-06-08 05:20:57.227636	Details available SQL Injection vulnerability in admin/batch_manager.php in piwigo v2.9.5, via the filter_category parameter to admin.php?page=batch_manager. Published: 2022-05-06T13:55:59.000Z Updated: 2024-08-04T14:08:30.637Z Open on db.gcve.eu Reference links https://github.com/Piwigo/Piwigo/issues/1012	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-19216`	vulnerable	2026-06-08 05:20:57.227221	Details available SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm. Published: 2022-05-06T13:55:51.000Z Updated: 2024-08-04T14:08:30.726Z Open on db.gcve.eu Reference links https://github.com/Piwigo/Piwigo/issues/1011	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-19215`	vulnerable	2026-06-08 05:20:57.226798	Details available SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=user_perm. Published: 2022-05-06T13:55:41.000Z Updated: 2024-08-04T14:08:30.664Z Open on db.gcve.eu Reference links https://github.com/Piwigo/Piwigo/issues/1011	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-19213`	vulnerable	2026-06-08 05:20:57.226376	Details available SQL Injection vulnerability in cat_move.php in piwigo v2.9.5, via the selection parameter to move_categories. Published: 2022-05-06T13:55:31.000Z Updated: 2024-08-04T14:08:30.632Z Open on db.gcve.eu Reference links https://github.com/Piwigo/Piwigo/issues/1010	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-19212`	vulnerable	2026-06-08 05:20:57.225850	Details available SQL Injection vulnerability in admin/group_list.php in piwigo v2.9.5, via the group parameter to delete. Published: 2022-05-06T13:55:25.000Z Updated: 2024-08-04T14:08:30.658Z Open on db.gcve.eu Reference links https://github.com/Piwigo/Piwigo/issues/1009	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13364`	vulnerable	2026-06-08 05:12:42.172555	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-13363`	vulnerable	2026-06-08 05:12:42.172090	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.