Lucene search
+L

4 matches found

ATTACKERKB
ATTACKERKB
added 2017/12/21 4:29 a.m.4 views

CVE-2017-17822

The List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin/userlistbackend.php sSortDir0 parameter. An attacker can exploit this to gain access to the data in a connected MySQL database...

4.9CVSS8.4AI score0.0137EPSS
SaveExploits0References4
OSV
OSV
added 2017/12/21 4:29 a.m.27 views

CVE-2017-17822

The List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin/userlistbackend.php sSortDir0 parameter. An attacker can exploit this to gain access to the data in a connected MySQL database...

4.9CVSS6.2AI score
SaveExploits0References3
Prion
Prion
added 2017/12/21 4:29 a.m.24 views

Sql injection

The List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin/userlistbackend.php sSortDir0 parameter. An attacker can exploit this to gain access to the data in a connected MySQL database...

4CVSS5.8AI score0.0137EPSS
SaveExploits0References3Affected Software1
CVE
CVE
added 2017/12/21 4:0 a.m.57 views

CVE-2017-17822

CVE-2017-17822 affects Piwigo 2.9.2, specifically the List Users API. The vulnerability is a SQL injection in the List Users API component, exploitable via the /admin/user_list_backend.php sSortDir_0 parameter, allowing an attacker to access data in a connected MySQL database. Multiple connected ...

4.9CVSS6.1AI score0.0137EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder