PT-2020-10330

Name of the Vulnerable Software and Affected Versions MFScripts YetiShare versions 3.5.2 through 4.5.4 Description The issue allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database, due to the direct insertion of values from the sSortDir 0...

PT-2019-15932

Name of the Vulnerable Software and Affected Versions MFScripts YetiShare versions 3.5.2 through 4.5.3 Description The issue allows an attacker to inject their own SQL and manipulate the query, typically extracting data from the database. This is achieved by directly inserting values from the...

PT-2017-15027

Name of the Vulnerable Software and Affected Versions Piwigo version 2.9.2 Description The issue concerns SQL Injection via the sSortDir 0 parameter in the List Users API, specifically affecting the /admin/user list backend.php endpoint. This allows an attacker to potentially gain access to the...