CVE-2009-4424

CVE-2009-4424 describes an SQL injection in results.php of the Pyrmont WordPress plugin (Pyrmont 2). The vulnerability is triggered via the id parameter, allowing remote attackers to execute arbitrary SQL commands. CVSS v2 base score is 7.5 (HIGH). Affected software is the Pyrmont theme/plugin ve...