← All advisories

High severity7.2NVD Advisory· Published Apr 2, 2021· Updated Jun 17, 2026

CVE-2021-27973

CVE-2021-27973

Description

SQL injection exists in Piwigo before 11.4.0 via the language parameter to admin.php?page=languages.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Piwigo/Piwigo2 versions
cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:piwigo:piwigo:*:*:*:*:*:*:*:*range: <11.4.0
- (no CPE)range: <11.4.0
Piwigo/Piwigodescription

Patches

Vulnerability mechanics

References

2

packetstormsecurity.com/files/162404/Piwigo-11.3.0-SQL-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
github.com/Piwigo/Piwigo/issues/1352nvdExploitPatchThird Party Advisory

News mentions

0

No linked articles in our index yet.