CVE-2023-33361: Improper Neutralization of Special Elements used in an SQL Command

Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php...

CVE-2023-33361

Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php...

CVE-2023-33361

Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php. Affected component: admin/permalinks.php; root cause: unsanitized SQL input leading to high-severity (CRITICAL) impact on confidentiality, integrity, and availability (CVSS v3.1: 9.8). Exploitation indicators exist (PoC noted...