CVE-2023-26876

HIGH LAB

Piwigo CVE-2023-26876 Gather Credentials via SQL Injection

Title source: metasploit

Description

SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.

Exploits (2)

github WORKING POC 4 stars

by incogbyte · pythonpoc

https://github.com/incogbyte/cves_exploits/tree/main/CVE-2023-26876

View Code ZIP pw:eip

metasploit WORKING POC

by rodnt, Rodolfo Tavares, Tempest Security, Henrique Arcoverde · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/piwigo_cve_2023_26876.rb

View Code ZIP pw:eip

References (5)

[Exploit, Third Party Advisory] https://gist.github.com/rodnt/a190d14d1715890d8df19bad58b90693

[Product] https://piwigo.com

[Not Applicable] https://www.tempest.com.br

[Mailing List] http://seclists.org/fulldisclosure/2023/Apr/13

[Exploit, Third Party Advisory] http://packetstormsecurity.com/files/172059/Piwigo-13.5.0-SQL-Injection.html

Scores

CVSS v3 8.8

EPSS 0.5169

EPSS Percentile 97.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Lab Environment

COMMUNITY

Community Lab

docker pull mysql:8.0.18

https://github.com/rapid7/metasploit-framework

https://github.com/incogbyte/cves_exploits

View in Library

Details

CWE

CWE-89

Status published

Products (1)

piwigo/piwigo < 13.5.0

Published Apr 21, 2023

Tracked Since Feb 18, 2026