CVE-2009-2122 - SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter

Back Back to CVE browser

HIGH

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter

Published Jun 19, 2009

7.5

HIGH

CVSS 2.0

EPSS 2.74%

Description

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (4)

http://secunia.com/advisories/35450
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/35382
vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/51152
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8961
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/35450		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.securityfocus.com/bid/35382		vdb-entryx_refsource_BIDExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/51152		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8961		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 19, 2009

Updated Aug 7, 2024

Reserved Jun 19, 2009

Link CVE-2009-2122

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2122

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-2122