CVEvulnerability
CVE-2010-0673
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-02-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-89
Description
SQL injection vulnerability in cplphoto.php in the Copperleaf Photolog plugin 0.16, and possibly earlier, for WordPress allows remote attackers to execute arbitrary SQL commands via the postid parameter.
Affected configurations
• copperleaf photolog 0.16
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://osvdb.org/62346 osvdb.org
- http://packetstormsecurity.org/1002-exploits/wpcopperleaf-sql.txt Exploit
- http://secunia.com/advisories/38579 Vendor Advisory
- http://www.exploit-db.com/exploits/11458 Exploit
- http://www.securityfocus.com/bid/38239 Exploit
- http://osvdb.org/62346 osvdb.org
- http://packetstormsecurity.org/1002-exploits/wpcopperleaf-sql.txt Exploit
- http://secunia.com/advisories/38579 Vendor Advisory
- http://www.exploit-db.com/exploits/11458 Exploit
- http://www.securityfocus.com/bid/38239 Exploit