← Back to CVE List

CVE-2017-17823

Published: 2017-12-21T04:29Z
Last Modified: 2024-11-21T03:18Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
The Configuration component of Piwigo 2.9.2 is vulnerable to SQL Injection via the admin/configuration.php order_by array parameter. An attacker can exploit this to gain access to the data in a connected MySQL database. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt