CVE-2017-10682

PoC —

CVSS 3.0

9.8 critical

EPSS

8%p95

Published

Jun 29, 2017 (Jun 29, 2017)

Modified

Jun 17, 2026

Description

SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via the cat_false or cat_true parameter in the comments or status page to cat_options.php.

Vendors: piwigo
Products: piwigo
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.3%)

In the news0 stories

No ingested article mentions this CVE yet.