Description

SQL injection vulnerability in Piwigo before 2.5.6, 2.6.x before 2.6.5, and 2.7.x before 2.7.3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Remediation

References

CVE-2015-1441

Related Vulnerabilities

PHP Improper Input Validation Vulnerability (CVE-2011-4885)

WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Security Bypass (2.8.7)

WordPress Plugin Recall Products Multiple Vulnerabilities (0.8)

WordPress Plugin WordPress Console Security Bypass (0.3.9)

WordPress Plugin Browser Screenshots Cross-Site Scripting (1.7.5)

Severity

High

Classification

CVE-2015-1441 CWE-138

Tags

Missing Update Known Vulnerabilities