Description
SQL injection vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote administrators to execute arbitrary SQL commands via the user parameter in the history page to admin.php.
Remediation
References
Related Vulnerabilities
PHP Other Vulnerability (CVE-2002-0229)
WordPress Plugin Complianz-GDPR/CCPA Cookie Consent SQL Injection (6.3.3)
CKEditor Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2023-31541)
WordPress Plugin SMTP Mailer Cross-Site Request Forgery (1.0.6)
Internet Information Services Other Vulnerability (CVE-1999-0737)