CVE-2009-2383

SQL injection vulnerability in BTE_RW_webajax.php in the Related Sites plugin 2.1 for WordPress allows remote attackers to execute arbitrary SQL commands via the guid parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2009-07-08

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Related-sites (Blogtrafficexchange)

References

• http://www.exploit-db.com/exploits/9054
• http://www.securityfocus.com/bid/35538
• https://exchange.xforce.ibmcloud.com/vulnerabilities/51446