Description

Piwigo 11.4.0 allows admin/user_list_backend.php order[0][dir] SQL Injection.

Remediation

References

CVE-2021-32615

Related Vulnerabilities

Drupal Core 8.x Multiple Vulnerabilities (8.0.0 - 8.2.6)

WordPress Plugin ExS Widgets Local File Inclusion (0.3.1)

Atlassian Jira CVE-2021-39121 Vulnerability (CVE-2021-39121)

WordPress Plugin Absolute Privacy 'abpr_authenticateUser()' Security Bypass (2.0.5)

Rukovoditel Cross-site Scripting (XSS) Vulnerability (CVE-2019-7541)

Severity

Critical

Classification

CVE-2021-32615 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities