4 matches found
Sql injection
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator...
CVE-2018-6883
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator...
CVE-2018-6883: Improper Neutralization of Special Elements used in an SQL Command
Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator...
PT-2018-17802
Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.9.3 Description The issue concerns SQL injection in the administration panel, specifically in admin/tags.php. It can be exploited via the tags array parameter in an "admin.php?page=tags" request. The attacker must ha...