Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c7gr-mvmf-xv4h

Опубликовано: 14 мая 2022
Источник: github
Github: Не прошло ревью

Описание

SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.

SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.

EPSS

Процентиль: 77%
0.01034
Низкий

Дефекты

CWE-89

Связанные уязвимости

ubuntu
почти 11 лет назад

SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.

nvd
почти 11 лет назад

SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.

debian
почти 11 лет назад

SQL injection vulnerability in Piwigo before 2.7.4, when all filters a ...

EPSS

Процентиль: 77%
0.01034
Низкий

Дефекты

CWE-89