PT-2021-19808

Name of the Vulnerable Software and Affected Versions Piwigo version 11.4.0 Description The issue allows for SQL Injection through the order0dir parameter in the admin/user list backend.php endpoint. Recommendations For Piwigo version 11.4.0, as a temporary workaround, consider restricting access...