CVE-2014-4649

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute…

published June 28, 2014

CVSS
—
EPSS
1%
Percentile
62.7
In the wild
Unconfirmed
What it is

SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute arbitrary SQL commands via the associate[] field.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01007 · 62.7th percentile
Published
2014-06-28T15:00Z
EPSS history
Timeline
  • 28 JUN 15:00Z
    SQL injection vulnerability in the photo-edit subsystem in Piwigo 2.6.x and 2.7.x before 2.7.0beta2 allows remote authenticated administrators to execute…
    cvelistv5