CVE-2015-2035: SQL Injection
Published Feb 20, 2015
·Updated
SQL injection vulnerability in the administrative backend in Piwigo before 2.7.4 allows remote administrators to execute arbitrary SQL commands via the user parameter in the history page to admin.php.
Affected Software
1 affected component
Piwigo piwigo<=2.7.3
Remediation
Patch Available
Event History
Feb 20, 2015
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-2035?
CVE-2015-2035 has a medium severity rating due to its potential for misuse by remote attackers.
2
How do I fix CVE-2015-2035?
To fix CVE-2015-2035, upgrade Piwigo to version 2.7.4 or later.
3
What is the impact of CVE-2015-2035?
The impact of CVE-2015-2035 allows remote administrators to execute arbitrary SQL commands, potentially compromising the database.
4
Which versions of Piwigo are affected by CVE-2015-2035?
CVE-2015-2035 affects Piwigo versions prior to 2.7.4.
5
Who can exploit CVE-2015-2035?
CVE-2015-2035 can be exploited by remote administrators with access to the administrative backend.