Sql injection

2010-02-2220:30:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.5%

JSON

SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.

CPENameOperatorVersion
photologeq0.16

CPE	Name	Operator	Version
	photolog	eq	0.16

References

osvdb.org/62346

packetstormsecurity.org/1002-exploits/wpcopperleaf-sql.txt

secunia.com/advisories/38579

www.securityfocus.com/bid/38239

www.exploit-db.com/exploits/11458