← Database

CVE-2009-2122

HIGH CVSS: 7.5 Published: 2009-06-19 Modified: 2026-06-16

Description

SQL injection vulnerability in viewimg.php in the Paolo Palmonari Photoracer plugin 1.0 for WordPress allows remote attackers to execute arbitrary SQL commands via the id parameter.

Affected Platforms

Paolo Palmonari Photoracer Plugin For WordpressWordpress Wordpress

Weakness Type

CWE-89

References