CVE-2014-4649 | BDVDB-2026-62336 Detail

Description#

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://piwigo.org/bugs/view.php?id=3089
http://piwigo.org/bugs/changelog_page.php

Exploit#

No public exploit known

History#

Version 12014-06-28Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.