Piwigo 'rate_picture' function SQL injection vulnerability

Piwigo is a photo album script written in PHP. Piwigo suffers from a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by taking the picturephp rate parameter...