CVE-2015-1517
MEDIUM 6.0EPSS 2.7%
SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.
- CVSS v2.0 NVD
- 6.0 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P - EPSS
- 2.72% chance of exploitation in the next 30 days, 86th percentile
- Published
- 2015-02-20
- Updated
- 2024-08-06
ExploitDB entries (1)
Security advisories
- http://piwigo.org/forum/viewtopic.php?id=25179
- http://piwigo.org/releases/2.7.4
- http://www.securityfocus.com/bid/72664