← Back to CVE List

CVE-2017-17822

Published: 2017-12-21T04:29Z
Last Modified: 2024-11-21T03:18Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The List Users API of Piwigo 2.9.2 is vulnerable to SQL Injection via the /admin/user_list_backend.php sSortDir_0 parameter. An attacker can exploit this to gain access to the data in a connected MySQL database. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt