CVEs-PoC/2018/CVE-2018-6883.md

CVE-2018-6883

Description

Piwigo before 2.9.3 has SQL injection in admin/tags.php in the administration panel, via the tags array parameter in an admin.php?page=tags request. The attacker must be an administrator.

POC

Reference

• https://github.com/Piwigo/Piwigo/issues/839
• https://github.com/Piwigo/Piwigo/issues/839
• https://pastebin.com/tPebQFy4
• https://pastebin.com/tPebQFy4

Github

No PoCs found on GitHub currently.