CVE-2023-26876
SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to...
Original description
The description as published by the source.
SQL injection vulnerability found in Piwigo v.13.5.0 and before allows a remote attacker to execute arbitrary code via the filter_user_id parameter to the admin.php?page=history&filter_image_id=&filter_user_id endpoint.
References
- advisory github.com
- advisory nvd.nist.gov
- web packetstormsecurity.com
- web gist.github.com
- web piwigo.com
- web tempest.com.br
- web seclists.org