| Package | Affected versions | Patched versions |
|---|---|---|
| piwigo | ≤ 2.9.1 |
SQL injection vulnerability in the administrative backend in Piwigo through 2.9.1 allows remote users to execute arbitrary SQL commands via the cat_false or cat_true parameter in the comments or status page to cat_options.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free