CVE-2020-19216

SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-05-06

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Piwigo (Piwigo)

References

• https://github.com/Piwigo/Piwigo/issues/1011