PT-2014-8834

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.5.5 Piwigo versions 2.6.x prior to 2.6.4 Piwigo versions 2.7.x prior to 2.7.2 Description The issue allows remote attackers to execute arbitrary SQL commands via the rate parameter to "picture.php". This is related t...