TI-2012-02075 CVE-2012-2338 · GHSA-h936-65jc-4jcgSQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1…Priority LOW 37SQL injection vulnerability in includes/picture.class.php in Galette 0.63, 0.63.1, 0.63.2, 0.63.3, and 0.64rc1 allows remote attackers to execute arbitrary SQL commands via the id_adh parameter to picture.php.CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02209 · Published 2012-05-21 · No fix listed CWE-89