CVE-2020-19216

Impact

SQL Injection vulnerability in admin/user_perm.php in piwigo v2.9.5, via the cat_false parameter to admin.php?page=group_perm.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/Piwigo/Piwigo/issues/1011
• https://github.com/Piwigo/Piwigo/issues/1011