Description
SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.
Remediation
References
Related Vulnerabilities
Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-6102)
MySQL CVE-2024-21160 Vulnerability (CVE-2024-21160)
WordPress Plugin Share and Follow 'admin.php' Cross-Site Scripting (1.80.3)
WordPress Plugin Broken Link Manager SQL Injection (0.6.5)
WordPress Plugin School Management System-WPSchoolPress Multiple Vulnerabilities (2.1.9)