Vulnerabilities

CVE-2017-9426 | BDVDB-2026-97120 Detail

Description#

ws.php in the Facetag extension 0.0.3 for Piwigo allows SQL injection via the imageId parameter in a facetag.changeTag or facetag.listTags action.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

Exploit#

https://www.exploit-db.com/exploits/42094/

History#

Version 12018-02-26Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.