2 matches found
CVE-2017-17824
The Batch Manager component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/batchmanagerunit.php elementids parameter in unit mode. An attacker can exploit this to gain access to the data in a connected MySQL database...
4.9CVSS5.7AI score0.01504EPSS
SaveExploits1References3
CVE-2017-17824: Improper Neutralization of Special Elements used in an SQL Command
The Batch Manager component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/batchmanagerunit.php elementids parameter in unit mode. An attacker can exploit this to gain access to the data in a connected MySQL database...
4.9CVSS6.2AI score0.01504EPSS
SaveExploits1References2
20