PT-2021-19808

Name of the Vulnerable Software and Affected Versions Piwigo version 11.4.0 Description The issue allows for SQL Injection through the order0dir parameter in the admin/user list backend.php endpoint. Recommendations For Piwigo version 11.4.0, as a temporary workaround, consider restricting access...

PT-2017-18936

Name of the Vulnerable Software and Affected Versions Piwigo versions prior to 2.9.0 Description The issue allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The user list backend.php component is...