NVD

Id
87092  
Name
CVE-2017-9463  
Description
The application Piwigo is affected by a SQL injection vulnerability in version 2.9.0 and possibly prior. This vulnerability allows remote authenticated attackers to obtain information in the context of the user used by the application to retrieve data from the database. The user_list_backend.php component is affected: values of the iDisplayStart & iDisplayLength parameters are not sanitized; these are used to construct a SQL query and retrieve a list of registered users into the application.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-06-23  
Published
2017-06-14  
Modified Date
2017-06-19  
Seq
2017-9463  

Actions

Related NVD References

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
68503 JVNDB-2017-004760 Piwigo における SQL インジェクションの脆弱性 Piwigo には、SQL インジェクションの脆弱性が存在します。 CVE-2017-9463 0 CVE-2017-9463 87092 4 6.5 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-004760.html 2017-06-13 2017-07-06 View