CVE-2009-2122

HIGH 7.5 CVSS 2.0

Published: June 19, 2009
Last modified: June 16, 2026
NVD status: Modified
Reported by: cve@mitre.org
Weakness: CWE-89
CVSS vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products and versions

n/a n/a — Versions not specified

References

secunia.com http://secunia.com/advisories/35450 Vendor Advisory
www.securityfocus.com http://www.securityfocus.com/bid/35382 Exploit
exchange.xforce.ibmcloud.com https://exchange.xforce.ibmcloud.com/vulnerabilities/51152
www.exploit-db.com https://www.exploit-db.com/exploits/8961
nvd.nist.gov Official NVD record

WordPress CVEs

Description

Affected products and versions

References