{"schema_version":"1","data":[{"id":3947,"advisory_id":"04112a45-452c-4db7-8073-024cf9042e73","revision":1,"source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-62262","source_published_at":"2026-09-25T15:46:04.598+00:00","published_at":"2026-10-24T21:43:23.1848+00:00","extraction_method":"structured","technologies":["core-cve","piwigo"],"cve_ids":["CVE-2026-62262"],"event_types":["advisory"],"payload":{"kind":"advisory","title":"Piwigo: Unauthenticated SQL injection in `pwg.images.filteredSearch.create`","summary":"Piwigo is a full featured open source photo gallery application for the web. In 17.0.0beta1 and earlier, when rating is enabled, an unauthenticated guest can call pwg.images.filteredSearch.create with a crafted ratings[] value and then open the returned search URL. include/ws_functions/pwg.images.php stores the unvalidated value in the search rules, and include/functions_search.inc.php integer-casts only the lower rating bound while concatenating the raw value as the SQL upper bound. This allows error-based or blind extraction of database information and database-dependent time delays through the public search flow. No fixed version is available as of this review.","evidence":"cve:CVE-2026-62262","products":[{"name":{"value":"Piwigo","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"critical","structured":{"id":"CVE-2026-62262","aliases":["CVE-2026-62262"],"metrics":[{"cvssV3_1":{"scope":"UNCHANGED","version":"3.1","baseScore":9.1,"attackVector":"NETWORK","baseSeverity":"CRITICAL","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","integrityImpact":"HIGH","userInteraction":"NONE","attackComplexity":"LOW","availabilityImpact":"NONE","privilegesRequired":"NONE","confidentialityImpact":"HIGH"}}],"affected":[{"vendor":"Piwigo","product":"Piwigo","versions":[{"status":"affected","version":"< 17.0.0beta1"}]}],"modified":"2026-09-29T19:19:31.528Z","provider":"cve","references":["https://github.com/Piwigo/Piwigo/security/advisories/GHSA-hq29-8hhx-5jwc","https://github.com/Piwigo/Piwigo/commit/9755d88edf38b94bafdedb0b3aba7304a94e2e5c","https://github.com/Piwigo/Piwigo/commit/aede490a0b3a6c246f1f4689ca86c8fee377a7ae"],"provider_metadata":{"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"id":"CVE-2026-62262","role":"CISA Coordinator","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"total"}],"version":"2.0.3","timestamp":"2026-09-29T19:19:06.002386Z"}}}],"references":[{"url":"https://github.com/Piwigo/Piwigo/security/advisories/GHSA-hq29-8hhx-5jwc","tags":["exploit"]}],"providerMetadata":{"orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP","dateUpdated":"2026-09-29T19:19:31.528Z"}}],"cna":{"orgId":"a0819718-46f1-4df5-94e2-005712e83aaa","shortName":"GitHub_M","dateUpdated":"2026-09-25T15:46:04.598Z"}}},"related_cves":[{"value":"CVE-2026-62262","evidence":"/cveMetadata/cveId"}],"security_relevant":true,"severity_evidence":"/containers/cna/metrics"}}],"next_after":3947,"next_before":3947}