Piwigo <= v2.6.0 – Blind SQL Injection

Posted by Manuel Garcia Cardenas on Nov 12

=============================================
MGC ALERT 2014-001
– Original release date: January 12, 2014
– Last revised: November 12, 2014
– Discovered by: Manuel García Cárdenas
– Severity: 7,1/10 (CVSS Base Score)
=============================================

I. VULNERABILITY
————————-
Blind SQL Injection in Piwigo <= v2.6.0

II. BACKGROUND
————————-
Piwigo is a web application management photo albums,…

Leave a Reply