CVE-2015-1517 | BDVDB-2026-68167 Detail

Description#

SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/72664
http://www.securityfocus.com/archive/1/534723/100/0/threaded
http://packetstormsecurity.com/files/130440/Piwigo-2.7.3-SQL-Injection.html
http://piwigo.org/releases/2.7.4
http://piwigo.org/forum/viewtopic.php?id=25179

Exploit#

No public exploit known

History#

Version 12015-02-20Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.