7.5
CVSSv2

CVE-2009-2122

Published: 19/06/2009 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote malicious users to execute arbitrary SQL commands via the id parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

paolo_palmonari photoracer_plugin_for_wordpress 1.0

Exploits

Wordpress Photoracer Plugin => SQL injection wordpressorg/extend/plugins/photoracer/ Author: Kacper Website: devilteampl/ Pozdrawiam wszystkich z huba dc++, oraz wszystkich z forum, Pozdro: Ratman, Kopaczka, FDJ Elo: dla GLOBUSa za pomoc w crackowaniu hasel Vuln: sitepl/wp-content/plugins/photoracer/viewimgphp?i ...