EDB-35221

PoC

Piwigo 2.6.0 - 'picture.php?rate' SQL Injection

view exploit source exploit_dbtype webappsauthor Manuel García Cárdenaspublished 2014-11-13catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2014-9115UShigh7.5Exploit
SQL injection vulnerability in the rate_picture function in include/functions_rate.inc.php in Piwigo before 2.5.5, 2.6.x before 2.6.4, and 2.7.x before 2.7.2 allows remote attacker…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan