CVE-2015-1441

SQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2015-1441

CVE-2015-1441 is a SQL injection vulnerability affecting Piwigo prior to 2.5.6, 2.6.x prior to 2.6.5, and 2.7.x prior to 2.7.3. The description provides no specifics on the attack vectors or exploited parameters, only that remote attackers can execute arbitrary SQL commands. Public references ind...

Unspecified SQL Injection Vulnerability in Piwigo

Piwigo is a web-based photo album software from the Piwigo team. The software supports photo publishing, management, multiple browsing options categories, tags, time and more. Piwigo suffers from an unspecified SQL injection vulnerability that could be exploited by attackers to compromise the...

PT-2015-5289

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.5.6 Piwigo versions 2.6.x prior to 2.6.5 Piwigo versions 2.7.x prior to 2.7.3 Description The issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.5.6, update to...

CVE-2015-1441: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Free open source photo album Piwigo<= v2. 7. 1 SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

Some time ago a free open source photo album Piwigopwigo apiwigo = 2.6.0 sql injection vulnerabilitythe. Vulnerability published, piwigo has been updated to 2. 7. To 1. However, this vulnerability published time is indeed a genuine 0day, the impact of piwigo full version. The following was on the...

Piwigo Photo Gallery Project install script Directory Traversal - Ver2 (CVE-2013-1469)

A directory traversal vulnerability has been reported in Piwigo. Successful exploitation of this vulnerability would allow a remote attacker to list directories on the affected system...

Piwigo 'rate_picture' function SQL injection vulnerability

Piwigo is a photo album script written in PHP. Piwigo suffers from a SQL injection vulnerability that allows remote attackers to execute arbitrary SQL commands by taking the picturephp rate parameter...

CVE-2014-9115

SQL injection vulnerability in the ratepicture function in include/functionsrate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a...

Sql injection

SQL injection vulnerability in the ratepicture function in include/functionsrate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a...

CVE-2014-9115

SQL injection vulnerability in the ratepicture function in include/functionsrate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a...

CVE-2014-9115

SQL injection vulnerability in the ratepicture function in include/functionsrate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a...

CVE-2014-9115

CVE-2014-9115 is a SQL injection vulnerability in Piwigo's rate_picture function (include/functions_rate.inc.php). The issue allows remote attackers to inject arbitrary SQL via the rate parameter to picture.php due to a data type check flaw on a value that begins with a digit. Affected versions i...

PT-2014-8834

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.5.5 Piwigo versions 2.6.x prior to 2.6.4 Piwigo versions 2.7.x prior to 2.7.2 Description The issue allows remote attackers to execute arbitrary SQL commands via the rate parameter to "picture.php". This is related t...

CVE-2014-9115: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the ratepicture function in include/functionsrate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary SQL commands via the rate parameter to picture.php, related to an improper data type in a...

Piwigo 2.7.2 Cross Site Scripting / SQL Injection

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Piwigo - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor: http://www.piwigo.org/ Vendor Name: Piwigo Version: 2.7....

Piwigo 2.7.2 SQL Injection / Cross Site Scripting Vulnerabilities

Piwigo version 2.7.2 suffers from cross site scripting and remote SQL injection vulnerabilities. Exploit Title: Piwigo - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor: http://www.piwigo.org/ Vendor Name: Piwigo Version: 2.7.2 CVE: CVE-2014-1470 CVE References:...

Piwigo 2.7.2 - Multiple Vulnerabilities

Piwigo 2.7.2 - Multiple Vulnerabilities -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Piwigo 2.7.2 - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor:...

Piwigo 2.7.2 - Multiple Vulnerabilities

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= INDEPENDENT SECURITY RESEARCHER PENETRATION TESTING SECURITY -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Exploit Title: Piwigo 2.7.2 - SQL Injection / Cross Site Scripting Vulnerability's Date: 19/12/2014 Url Vendor: http://www.piwigo.org/ Vendor Name: Piwigo Version...

Free open source photo album Piwigo <= v2. 6. 0 SQL injection vulnerability 0day-a vulnerability warning-the black bar safety net

Piwigo is the world's most famous free open source photo album system by PHP+MySQL architecture. Since the framework build easy, by domestic and foreign developers favor recently, Piwigo = v2. 6. 0 burst critical 0day vulnerability. Vulnerability causes,Piwigo photo album system/piwigo/picture. p...