Описание
SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field.
Уязвимые конфигурации
Конфигурация 1
Одно из
cpe:2.3:a:piwigo:piwigo:2.6.0:*:*:*:*:*:*:*
cpe:2.3:a:piwigo:piwigo:2.6.1:*:*:*:*:*:*:*
cpe:2.3:a:piwigo:piwigo:2.6.2:*:*:*:*:*:*:*
cpe:2.3:a:piwigo:piwigo:2.6.3:*:*:*:*:*:*:*
cpe:2.3:a:piwigo:piwigo:2.7.0:beta1:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00267
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-89
Связанные уязвимости
ubuntu
больше 11 лет назад
SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field.
debian
больше 11 лет назад
SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6. ...
github
больше 3 лет назад
SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field.
EPSS
Процентиль: 50%
0.00267
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-89