NVD

Id
87639  
Name
CVE-2017-10682  
Description
SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via the cat_false or cat_true parameter in the comments or status page to cat_options.php.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-06-29  
Modified Date
2017-07-04  
Seq
2017-10682  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
423484 87639 CVE-2017-5868 [oss-security] 20170523 [CVE-2017-5868] OpenVPN Access Server : CRLF injection with Session fixation  View
423485 87639 CVE-2017-5868 1038547  View
423486 87639 CVE-2017-5868 https://sysdream.com/news/lab/2017-05-05-cve-2017-5868-openvpn-access-server-crlf-injection-with-session-fixation/  View
423487 87639 CVE-2017-5868 [oss-security] 20170523 [CVE-2017-5868] OpenVPN Access Server : CRLF injection with Session fixation  View
423488 87639 CVE-2017-5868 1038547  View
423489 87639 CVE-2017-5868 https://sysdream.com/news/lab/2017-05-05-cve-2017-5868-openvpn-access-server-crlf-injection-with-session-fixation/  View
429948 87639 CVE-2017-0166 1038245  View
429949 87639 CVE-2017-0166 1038245  View

Related JVN