What’s Vulnerable › Vulnerabilities

CVE-2014-125053: Piwigo-Guest-Book Navigation Bar guestbook.inc.php sql injection

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-01-06 · updated 2026-06-17
• Weakness: CWE-89

Description

A vulnerability was found in Piwigo-Guest-Book up to 1.3.0. It has been declared as critical. This vulnerability affects unknown code of the file include/guestbook.inc.php of the component Navigation Bar. The manipulation of the argument start leads to sql injection. Upgrading to version 1.3.1 is able to address this issue. The patch is identified as 0cdd1c388edf15089c3a7541cefe7756e560581d. It is recommended to upgrade the affected component. VDB-217582 is the identifier assigned to this vulnerability.

Affected products

• Piwigo Guestbook: before 1.3.1 — fixed in 1.3.1

How to fix

Upgrade to a fixed version: Piwigo Guestbook 1.3.1. Check the vendor advisory for mitigations.

References

• https://github.com/Piwigo/Piwigo-Guest-Book/commit/0cdd1c388edf15089c3a7541cefe7756e560581d
• https://github.com/Piwigo/Piwigo-Guest-Book/releases/tag/1.3.1
• https://vuldb.com/?ctiid.217582
• https://vuldb.com/?id.217582
• https://github.com/Piwigo/Piwigo-Guest-Book/commit/0cdd1c388edf15089c3a7541cefe7756e560581d
• https://github.com/Piwigo/Piwigo-Guest-Book/releases/tag/1.3.1
• https://vuldb.com/?ctiid.217582
• https://vuldb.com/?id.217582

Get alerted when CVE-2014-125053 or the next vulnerability affects your stack