Skip to content
OpenAdvisories

Vendor

Piwigo

18 known vulnerabilities.

Products

Piwigo 18
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.7
    CVE-2024-48928

    Piwigo's secret key can be brute forced

    Piwigo is an open source photo gallery application for the web. In versions on the 14.x branch, when installing, the secret_key configuration parameter is set to MD5(RAND()) in MySQL. However, RAND() only has 30 bits of randomness, making it feasible to brute…

    Piwigo Piwigo