CVE-2010-0673

SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2010-02-22

Last modified

2024-08-07

Weaknesses

CWE-89

Affected products

• Photolog (Copperleaf)

References

• http://osvdb.org/62346
• http://packetstormsecurity.org/1002-exploits/wpcopperleaf-sql.txt
• http://secunia.com/advisories/38579
• http://www.exploit-db.com/exploits/11458
• http://www.securityfocus.com/bid/38239