Description Piwigo 11.5.0 is affected by a SQL injection vulnerability via admin.php and the id parameter. Remediation References CVE-2021-40317 Related Vulnerabilities Artifactory Improper Input Validation Vulnerability (CVE-2016-6501) Drupal Improper Link Resolution Before File Access ('Link Following') Vulnerability (CVE-2020-36193) Mailman Other Vulnerability (CVE-2004-1143) Ruby on Rails Improper Input Validation Vulnerability (CVE-2013-1856) MySQL CVE-2012-0112 Vulnerability (CVE-2012-0112) Severity High Classification CVE-2021-40317 CWE-138 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities