exploitDog

GHSA-c7j3-xxqh-xjh7

Опубликовано: 02 мая 2022

Источник: github

Github: Не прошло ревью

Описание

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

Ссылки

https://nvd.nist.gov/vuln/detail/CVE-2009-2933
http://secunia.com/advisories/36333
http://www.securityfocus.com/archive/1/505801/100/0/threaded
http://www.senseofsecurity.com.au/advisories/SOS-09-007.pdf

EPSS

Процентиль: 62%

0.01087

Низкий

CVE ID

Дефекты

CWE-89

Связанные уязвимости

CVE-2009-2933

ubuntu

почти 17 лет назад

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

CVE-2009-2933

nvd

почти 17 лет назад

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

CVE-2009-2933

debian

почти 17 лет назад

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 all ...

EPSS

Процентиль: 62%

0.01087

Низкий

CVE ID

Дефекты

CWE-89