CVE-2017-17823
Published
CVSS v3
N/A
CVSS v2
4
MEDIUM
Affected
2
PROJECTS
Description
The Configuration component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/configuration.php order_by array parameter. An attacker can exploit this to gain access to the data in a connected MySQL database.
Manage your photos with Piwigo, a full featured open source photo gallery application for the web. Star us on Github! More than 200 plugins and themes available. Join us and contribute!
GitHubI share my vulnerability research findings and methodologies here :)
GitHub