Description

SQL injection vulnerability in comments.php in Piwigo before 2.0.3 allows remote attackers to execute arbitrary SQL commands via the items_number parameter.

Remediation

References

CVE-2009-2933

Related Vulnerabilities

WordPress Plugin Modern Events Calendar Lite Multiple Vulnerabilities (5.16.2)

WordPress Plugin Ecwid Ecommerce Shopping Cart PHP Object Injection (4.4.3)

WordPress Plugin Interactive Geo Maps Cross-Site Scripting (1.5.8)

MongoDb Improper Neutralization of Null Byte or NUL Character Vulnerability (CVE-2024-10921)

Apache Tomcat Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2009-2902)

Severity

High

Classification

CVE-2009-2933 CWE-138

Tags

Missing Update Known Vulnerabilities