NuytsTech Security

CVE-2015-1517

by ·

SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php.

Date published : 2015-02-20

http://www.securityfocus.com/bid/72664

http://www.securityfocus.com/archive/1/534723/100/0/threaded

Tags: