adam/Piwigo
1
0 Fork 0
mirror of https://github.com/Piwigo/Piwigo.git synced 2026-10-30 21:52:00 +01:00
Code Issues 657 Packages Projects Releases Wiki Activity

Possible CGI Generic SQL Injection - From Experimental Nessus script #830

New Issue
Open
opened 2026-10-05 00:19:41 +02:00 by adam · 0 comments
adam commented 2026-10-05 00:19:41 +02:00
Owner
Copy link
Copy source

Greetings! The University IT Security office scans our systems using a Nessus System. They seem pretty worked up over the result below. Any assistance would be appreciated. We are running Piwigo 2.94.

High and Critical Risk Vulnerability Details
Nessus Plugin 42424
SQL Injection (blind)
Plugin Output:
Using the GET HTTP method, Nessus found that :

  • The following resources may be vulnerable to blind SQL injection :

  • The 'redirect' parameter of the /identification.php CGI :

/identification.php?username=&login=Submit&password=&remember_me=1&redir
ect=zz&login=Submit&password=&remember_me=1&redirect=yy

-------- output --------
</nav>

-------- vs --------
</nav>

<div class="container-fluid">
<div class="alert alert-danger alert-dismissible fade show" ro [...] <button type="button"
class="close" data-dismiss="alert">< [...]

Synopsis: A CGI application hosted on the remote web server is potentially prone to SQL injection
attack.
Description: By sending specially crafted parameters to one or more CGI scripts hosted on the
remote web server, Nessus was able to get a very different response, which suggests that it may
have been able to modify the behavior of the application and directly access the underlying
database.

An attacker may be able to exploit this issue to bypass authentication, read confidential data,
modify the remote database, or even take control of the remote operating system.

Note that this script is experimental and may be prone to false positives. Solution: Modify the
affected CGI scripts so that they properly escape arguments. First Discovered: Jan 25, 2018
13:33:20 CST
Last Observed: Sep 26, 2018 23:43:07 CDT
Exploit Frameworks:

Greetings! The University IT Security office scans our systems using a Nessus System. They seem pretty worked up over the result below. Any assistance would be appreciated. **We are running Piwigo 2.94.** High and Critical Risk Vulnerability Details Nessus Plugin 42424 SQL Injection (blind) Plugin Output: Using the GET HTTP method, Nessus found that : + The following resources may be vulnerable to blind SQL injection : + The 'redirect' parameter of the /identification.php CGI : /identification.php?username=&login=Submit&password=&remember_me=1&redir ect=zz&login=Submit&password=&remember_me=1&redirect=yy -------- output -------- &lt;/nav&gt; -------- vs -------- &lt;/nav&gt; &lt;div class="container-fluid"&gt; &lt;div class="alert alert-danger alert-dismissible fade show" ro [...] &lt;button type="button" class="close" data-dismiss="alert"&gt;&lt; [...] ------------------------ Synopsis: A CGI application hosted on the remote web server is potentially prone to SQL injection attack. Description: By sending specially crafted parameters to one or more CGI scripts hosted on the remote web server, Nessus was able to get a very different response, which suggests that it may have been able to modify the behavior of the application and directly access the underlying database. An attacker may be able to exploit this issue to bypass authentication, read confidential data, modify the remote database, or even take control of the remote operating system. Note that this script is experimental and may be prone to false positives. Solution: Modify the affected CGI scripts so that they properly escape arguments. First Discovered: Jan 25, 2018 13:33:20 CST Last Observed: Sep 26, 2018 23:43:07 CDT Exploit Frameworks: <!-- github-sync-id:364930298 -->
Sign in to join this conversation.
No Branch/Tag Specified
Labels
No items
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
adam (Adam Wojcieszonek)
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: adam/Piwigo#830