PT-2023-31914

Name of the Vulnerable Software and Affected Versions Lychee versions prior to 5.0.2 Description Lychee, a free photo-management tool, is vulnerable to an SQL injection on any binding when using mysql/mariadb. This injection is only active for users with the .env settings set to DB LOG SQL=true a...