1047 matches found
Sql injection
SQL Injection vulnerability in admin/grouplist.php in piwigo v2.9.5, via the group parameter to delete...
Sql injection
SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=userperm...
Sql injection
SQL Injection vulnerability in catmove.php in piwigo v2.9.5, via the selection parameter to movecategories...
Sql injection
SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=groupperm...
CVE-2020-19217
CVE-2020-19217 affects Piwigo 2.9.5. A SQL injection flaw exists in admin/batch_manager.php exploitable via the filter_category parameter, enabling injection through admin.php?page=batch_manager. The issue is caused by unsafely interpolating user-controlled input into SQL queries, as described ac...
CVE-2020-19217
SQL Injection vulnerability in admin/batchmanager.php in piwigo v2.9.5, via the filtercategory parameter to admin.php?page=batchmanager...
CVE-2020-19216
SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=groupperm...
CVE-2020-19216
This CVE (CVE-2020-19216) affects Piwigo 2.9.5, where an SQL injection exists in admin/user_perm.php triggered via the cat_false parameter in admin.php?page=group_perm. The root cause is an injection vulnerability in the admin permission management flow, allowing potentially unauthorized access t...
CVE-2020-19215
SQL Injection vulnerability in admin/userperm.php in piwigo v2.9.5, via the catfalse parameter to admin.php?page=userperm...
CVE-2020-19215
CVE-2020-19215 describes a SQL injection in Piwigo v2.9.5, exploiting the admin/user_perm.php component via the cat_false parameter in admin.php?page=user_perm. The root cause is an injectable input handling within that admin page; impact is partial to high depending on the document’s CVSS data, ...
CVE-2020-19213
CVE-2020-19213 affects Piwigo 2.9.5. The vulnerability is a SQL injection in cat_move.php via the selection parameter to move_categories. The flaw allows arbitrary SQL execution potentially impacting confidentiality, integrity, and availability as described in CVSS metrics (high to critical overa...
CVE-2020-19213
SQL Injection vulnerability in catmove.php in piwigo v2.9.5, via the selection parameter to movecategories...
CVE-2020-19212
CVE-2020-19212 affects piwigo v2.9.5. The vulnerability is an SQL injection in admin/group_list.php, exploitable via the group parameter to delete, potentially enabling unauthorized deletion of groups. Detailed technical specifics are provided across multiple databases (e.g., NVD, RH, CNVD, OSV, ...
CVE-2020-19212
SQL Injection vulnerability in admin/grouplist.php in piwigo v2.9.5, via the group parameter to delete...
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/userperm.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via the...
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo 2.9.5 version of a security vulnerability , the vulnerability stems from catmove.php in the existence of SQL injection , an...
piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. piwigo admin/grouplist.php has a SQL injection vulnerability that can be exploited by attackers to delete via the group parameter...
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/userperm.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via the...
Piwigo SQL注入漏洞
Piwigo is a Web-based open source photo gallery software. The software includes features such as image management, image categorization and permission management. Piwigo admin/batchmanager.php has a SQL injection vulnerability that can be exploited by an attacker to inject it into admin.php via t...
